000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400935c08000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg$alg(r6, &(0x7f0000000140), 0x42, 0x40020f0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x33fe0}}, 0x0) 13:44:56 executing program 0: unshare(0x4020600) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x5, 0x0, 0x0) 13:44:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000100)={0x10000}) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100), 0x31, r2) 13:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r2 = socket$netlink(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x3}]}]}, 0x48}}, 0x0) 13:44:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x8000000803, 0x0) write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000f00)=0x1000000, 0x4) 13:44:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={&(0x7f0000006380)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:44:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4142, 0x0) 13:44:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @broadcast, 0x15, 0x0, 'lblc\x00', 0x3}, 0x2c) 13:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r2 = socket$netlink(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x3}]}]}, 0x48}}, 0x0) 13:44:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4142, 0x0) 13:44:57 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x20000fb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) [ 3311.051810][T11323] user requested TSC rate below hardware speed 13:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r2 = socket$netlink(0xa, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x3}]}]}, 0x48}}, 0x0) 13:44:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4142, 0x0) 13:44:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={&(0x7f0000006380)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:44:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100), 0xc, &(0x7f0000000880)={0x0, 0x1c}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000001fc0)={0x424, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xed, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ee1b9d9708b0a2e6ff15995ddfffce1385c20a2ddde600b4c9d9f9934435911991a63cd30993767286ee1f021cacc7f774f6b415114e2246a906c6102c3042ff70d5287710e3b46c2963e686e5b213431a0941d9b70ecb42e9f9530a290a114bafcfcb0a849923175da67c7916637fe7bedf906f308a7acd067d7d3902d19c20179befec1683ed2eaef01ffe650daf949113c75048d7274372105362b81b770b48c220774b13f0e1935f156a2de1e729ad943153736c3452666c9390e0d57ccbf9ce1deed40d06f30b0ff8f6953147682265ba678edd3ba71a58dc40e7", @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x19d, 0x0, 0x0, 0x1, [@generic="e12ea28b6b48351535cd8f9ca55e1b2b21cd6cb975a2ed96aa808eb5999395ed8503352b99159ee4ef24a1cc09fcce92adec0a58d9798976355c69ca9e24b7b1ff9f90c65d3ca60bbb28f5c14761e6a36d7faaa8fbc42507fe19fb7d72dbfc98fed397945d2dc8eb3f6b85792c4d9c13a5e8800b2d48172185f8fbdc40761258adec5bed5521c95466cad4ca658895a53e6340b61e46fa467012", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="37d07569529093d733b2a8a465dbf514185851f4de27a4bcffb9ad229cd6eeacea70409d6a500a100489ab1ee1705bc5532f793b82746659b93faa014115195ee1760f553604645a4b13bf59da1691cf1526108b2dcac30c7f55482607d6186a0c836c7b23ad753d0ad0fc4b08975bfe9899d26b8d184dcd6f4e4bc759f028fa7972e51c72ba0429d905ae4857fbf6ca9311a38de54b2dca9a93376dbe0070546915b2dc826022718053eee890e8588c4b94735a402eb4ec7058fcd98c79af08d8c2b0ed5c2f1f0bea5bc0528ab7d99a6a177e08721fa083a53c581d4ccb131be117eeb7f90f7581d2b16515d4b2c534075ae5"]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x165, 0x0, 0x0, 0x1, [@generic="f340cd71cdb110ff24d59e218ab216e2bd8431b27103568dff56afa299ce9fcd8f8550fbda31021080be7b5c18506fecd802440ed9dee5d9e1e60ff2c42532613afebe67970e4ad1db0c455bea915b450329dd8c05910812a7de36086f359cea0f3f3632d6c65334697ed93ae66d3fb0a977aef7e2ca457aa505bd72b8d74ad69c2256f5de", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ce872e4e093efa4d043e643bbbf52838896fb4f2e056efcf8cb9786f28a895ef165e7bbc537b265c1daebd04520881dbcbb424103b4d8fad5c11115cda5335e9edbeb80f3c1e207ed53712fcab2bf41365543f2cb346bc67c8832a57759b79eaafca7a093a90a28a6f200f793ba439941d349a515acf5229931688613dc7372a29f7c55f07a93edf86c3a95f6cd5ef2b01f3be1eaf1fd352ae2699e064dfb5d071", @generic="de604842ca2c8972567e04cdddea1d02cacbcd011fa95d08bf2c4cfb5259cbb61fd5bf2fc6bc78"]}, @typed={0x6, 0x0, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x424}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:44:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4142, 0x0) 13:44:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x8000000803, 0x0) write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000f00)=0x1000000, 0x4) 13:44:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000013c0)) 13:44:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800c0001"], 0x40}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3312.640490][T11362] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2e48/0x3440 13:44:59 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) 13:44:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x1e}}) 13:44:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100), 0xc, &(0x7f0000000880)={0x0, 0x1c}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000001fc0)={0x424, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xed, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ee1b9d9708b0a2e6ff15995ddfffce1385c20a2ddde600b4c9d9f9934435911991a63cd30993767286ee1f021cacc7f774f6b415114e2246a906c6102c3042ff70d5287710e3b46c2963e686e5b213431a0941d9b70ecb42e9f9530a290a114bafcfcb0a849923175da67c7916637fe7bedf906f308a7acd067d7d3902d19c20179befec1683ed2eaef01ffe650daf949113c75048d7274372105362b81b770b48c220774b13f0e1935f156a2de1e729ad943153736c3452666c9390e0d57ccbf9ce1deed40d06f30b0ff8f6953147682265ba678edd3ba71a58dc40e7", @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x19d, 0x0, 0x0, 0x1, [@generic="e12ea28b6b48351535cd8f9ca55e1b2b21cd6cb975a2ed96aa808eb5999395ed8503352b99159ee4ef24a1cc09fcce92adec0a58d9798976355c69ca9e24b7b1ff9f90c65d3ca60bbb28f5c14761e6a36d7faaa8fbc42507fe19fb7d72dbfc98fed397945d2dc8eb3f6b85792c4d9c13a5e8800b2d48172185f8fbdc40761258adec5bed5521c95466cad4ca658895a53e6340b61e46fa467012", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="37d07569529093d733b2a8a465dbf514185851f4de27a4bcffb9ad229cd6eeacea70409d6a500a100489ab1ee1705bc5532f793b82746659b93faa014115195ee1760f553604645a4b13bf59da1691cf1526108b2dcac30c7f55482607d6186a0c836c7b23ad753d0ad0fc4b08975bfe9899d26b8d184dcd6f4e4bc759f028fa7972e51c72ba0429d905ae4857fbf6ca9311a38de54b2dca9a93376dbe0070546915b2dc826022718053eee890e8588c4b94735a402eb4ec7058fcd98c79af08d8c2b0ed5c2f1f0bea5bc0528ab7d99a6a177e08721fa083a53c581d4ccb131be117eeb7f90f7581d2b16515d4b2c534075ae5"]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x165, 0x0, 0x0, 0x1, [@generic="f340cd71cdb110ff24d59e218ab216e2bd8431b27103568dff56afa299ce9fcd8f8550fbda31021080be7b5c18506fecd802440ed9dee5d9e1e60ff2c42532613afebe67970e4ad1db0c455bea915b450329dd8c05910812a7de36086f359cea0f3f3632d6c65334697ed93ae66d3fb0a977aef7e2ca457aa505bd72b8d74ad69c2256f5de", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ce872e4e093efa4d043e643bbbf52838896fb4f2e056efcf8cb9786f28a895ef165e7bbc537b265c1daebd04520881dbcbb424103b4d8fad5c11115cda5335e9edbeb80f3c1e207ed53712fcab2bf41365543f2cb346bc67c8832a57759b79eaafca7a093a90a28a6f200f793ba439941d349a515acf5229931688613dc7372a29f7c55f07a93edf86c3a95f6cd5ef2b01f3be1eaf1fd352ae2699e064dfb5d071", @generic="de604842ca2c8972567e04cdddea1d02cacbcd011fa95d08bf2c4cfb5259cbb61fd5bf2fc6bc78"]}, @typed={0x6, 0x0, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x424}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:44:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x8000000803, 0x0) write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000f00)=0x1000000, 0x4) 13:44:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_fuse_handle_req(r0, &(0x7f0000000000)="782dbeb2d609115461948d8caf0caf1494eb86ad7eea25a1afab78b657e0b7b92229bfdc26a98b2e39127dc5d13294fcdc667d3ba64565e33785c0856d2659c7d9390224c964c6ca46d960aaa617c707119dc0e33ab858daad8b0b8539e37570836ea2bb8021961c9a6a461b281305d644f72a356043584ee01a79401502946434ae614be0758c3c236fbf3d99da784caf34c80c03aedc34137915fac4d3458c90f957d10144f74966962f26a05e8b960e1dd35248e40233877e3c8d31b3abd6d515d77bfe509e3f1b47b8828516a9c4283f95b340f453958dc8db7aec1c59cb6fc34833f512b343e3eecbdd097e377f0fb4b05bf75fbe762a6cbd84a01b3d28542eb4149076a945b874c617ed990a88098a5b7b648720ef3e0fbe8ab238576b32bcb553fceacb327c0bd9a52925d20db6256a14ed8e29d84f8f7db37430010fb8de326ab028ea6efa28418b4c53469084eb8356c2da8e2803cc3788989688a89889a6a2d6503a914695969d648381b17284f94091330cc5d6a2dba9a492cf24cce76a30e5e8d6ed64e8b8dc50b4a61ab8098000f24bf2538fa065842f0356aeba354795daa55d3498c8f6bcb6e3a04c2f1c72dfdd4ca08b7e79a2a6311576035846388e75ca0063cbcb3561f8f8588d16990e39a0358226eeab8f7ace6294551801f88f75ecbd108cf3e126ba0b4b9c4d0d29a4b3fbd90ea8f9b70f0ade67897a1bc3378c349c624e3ad6fbdb81ebcf86a04d97368832e2f7063bc511081510747b535f5b7e14546c3b331f256d491fa574a48a7bab15e9273f6ddacd7a2074001eae3090339e97da52d01e67cc6f53a3e31f180112d4def872b54446ae40bebd429e595fd42ff0bc9058e69547ab1c941f37248cfcf1ea3cbf4bed7e1c3da3da32601fe91d6146d75368addb398eac8b4a2310764bcb0d73256e2503aa7c7f53ba2e4a64b915392df04b0c9cf60a684b7b19814e33800bbfa34e2fa02c5423bad1d7f30174683bf5c495caba36ebbbfa827b99d2cd19e17e440b4b638d5d8d3c77e5efaf2c71a695aee8285547ae4489e10dfc3d5220d189a1eea5fa0098dc95a4de2be8ab4440a4d81f586d957576a74e6d0c1c8e6824e08bc808af8658c1e55e1c4be8d5c84e2ab089c1dbbbcc3e500a2e9454ae13a11d48b5203c7e39b8e2eea79a9d2feef9d7f21d765905f93029b07aa58f4faac80498d67139a4f5c48158f7af8eab578d52bf89a3dd5036494919be03e07fc36eff7b1a0b1eedb3ddd94972330f572f6ef616647413502af3c944464dae13f6b1d55507dcdedc49478abdb5d43961bac636b4b0ba78493a006bd710f125f3e119056479e3a2249ea3f2f21defd189c4c7a05641b3b321dec6a7b31169270e3a3fddd16e395d895ab8a364b36181a9bb7dca37215c000aa71597bd78d73aa1800046fb32182cabf56979d177e8a19b86b999805ea4899a4cc7f80884bc778936c2ba477f506de498cebce0dce2d61cf134f016edc00008146e5bf398bc806bfbb6f9b92a58237011e53f4899a48011bf9f94fe6e702c871a87c60c925b95773d97f28e022755c08f744bece806da2cb2f903db93b2f225747c64cef02d38c18e4f938e849babf261abc59d781981f4d430a9339b4078670c58527ed4eedf254156ad63f132ef33c52b127874d7814cabd104a6746ea94d2fed2baad6b6e60d3fb338ecf9f669b907f8430a3070c554e39da95e4a0e2a4d4132c32917a9ecc3730186ec44bfcff1c5b8f808d3fb8789551193467e4973ec35e502c6742aac4db72ea2385c24067c89fbd0c608dc9050daaef19107cf0f371441e49252c51b22a6465de8b0fed1ddbe0799d0fb8631e0c42b874f12398659a092513879afb0f0fd7079fc61514d5e9551e540e347e9f1119065e2e27fa0d2b49bc64c44d6f6a1e2494183a46871c463b02ca4377b06dab7e27012e670bdca3736c2b9f9049443519284cbe343394ae659db801ad803000fb8ff1d4f5f567731b1b5f331ccc79596f2785f53d7beb120ef47fa18711ece1e1849cbda4a37e864eedb8c1d03262b15af6adb18ad129f11b145235964623d9a9272c18fd647a0035111010d11f089c3e319c46969fbde2b1b7c365d27011c316917eb615710f9e48efd3e55810e7d3a2b679a235d26bc34c0a3b79aad8b6714ede353f3d56d417df5d2e0b72dd07169e0126b75aaf4adda06340282244ee0e9479c9e9b6420afa365bbaa3a23956b1fa2fcf5896fc3e11243f7059afb586c6dc7a79a58615bf5732d0e5d171de86af2578b98fb0e2b953b2d6c3d34e6727c5a7cc99f282d03be8c5cb9b061ae043c9d7129ef6254545599f4169f9cd021867841a9728be44b4eb9414d733d9a43feb70972297572cf685c70fa4e97b1de86342bf1e7d07f5fd939e6fbda55aee85b6611a74cf22f0bc75cafdbc492f830d824188bfe8d0ad3871b767f36519126f08d2e20f65c3ac9a84cc8ee8a1a8f06c4b96c16b404e2d108377d9a50243d4c4273dfcd081e508ad524f7067115d6ceb94e3fd1dc08ccaa56a95f6a796e81bbcb1a4cd9dc4a5c8f7539c00003517d82b40f133e5d79a0f736e09e304bac6ee7c1e17034e05e6b55e5689b6d8fa6c1acea7db3e97b3ffd5bf8c6140a6b2f47490f9b100004be5fdee5f043f3173aa86dc318e3e993670a453fd71fbfbf02500918c3b764799ef90ac1c5252cb537928fc96825c13b29e9aef5e8ea2d8f4e4cc01ff6f13e0ac3d943e19f9f8230ba278c558e1cec54a91644840322bc3f258e53c1cf76ae95504143c38a658b32555b89a03ed7238ebcaffa42fd1f69d4c9273c816ba9e36e41c755bae1f6f6990e549235a88c4c6f56b3b2fa5a02bc1f57e2249cb732cc6a8bc394f2f77e77b2c2420c6b5bbcaaa7535539eec3008324753c02e469b81be98a1b6bbc07ef82c4ded1bf555d8c0d68b391fd92c64bc20e144106459728d8a8c7757e23515dd48e73ad8b192bf95c96376e653a7465dac311b43fe715e44d0cd865b98fb96acca419bbae5dfd7e63f3d92ca15cdac324aa440b19d7a42b4e5f3d5bb820460b2242e45030f2605f5600debea9ae2781d067d8ccfeaf6c641b4babeccac038dfefc78ba7b92de79e8c976c1fceb70eaefc994ea3917eac1ab5e763d4ac80b17060f125980bad3d9915d7c35300d01f4315ede15a98261168c686e21105933614be05a4eaaeb4c2141c6f538c150efc2f6a343452524a3f1ab6c2e2261b0e6b545054d1356859c8a8199ce9eb9dcdd8f358cd61ab9e727c02099cd75e1d969e9ec5161da51426fdf4b6a8f45da387338725d35604c14c847e826aa37d3a495bb4d5dc9d1a06c0b1aedcdd8b987eb5a0ebaef8ccbff0fef8f9027ae7c2438a317bd6f099df6e8d26e6c156d883bb63ef23e33b25d487c8a9d65bae5069a1db1cdbc67627c6bf29eae388c8ff359199be7757ceb1cb1212639440b46c33a4114a9510762884b67b6255e05a4806e491d5424b1f0ed4b7543ee7a24bf64b04bffb01c53742bc67aa6296ad1cf2a91483a0712f62412eb1ce65a213b3d0ce15c6f64cf94d807023004bd3a3ef6f9106ed7e63a40d526409a4a6011fdf48966db4ae7e60245bc0a8e1672b6f60d827aa1f31279376e324f638cf763d69de2dae27326425ad28ea4cdc499f90c54cd1a01ab507738e3e5a2780d0e163f8704a18847e2a213427e83a6ad9d0eed81e5578944b18d42cbec2b6bef27e1868a01f8a7533189e703bd82a4bbaa2a155d020b1078bb4a04c2c9bc4d74641d04b714440c35271e7c10ce42ae554b73f0f3f4dfc6826dee9dab82e0b5751c38b4f3e7d58e3f69305ca7b3ce53e0bbf2b7723d16d18762558212b676bcc60af61b9bf02969dfca2e765dbbd31b5d2a2da7c7798a7df8220ab09425b930bd5b1f5eb78aaca5b8fc2b413b37121112ebca3f172797c3c47c7b4d1197e1f8f65661e4fdc3a523ecc6e2b2fb50b92f04333988cfe174d7b62aa18aec8ed3f55fb1c13d33584a85c8f9119b90feed234d2e54d01bddffece6b48510608c1115e44102573d65165d72f730d1778ec0fe994ec50b784855914b4e85e5587793379859092d0fe3964e3e89c6da562271b7e660c1b01533eed63698be5ff1cda4ba74dc43f78b3edb650a550cbbdf241c2c1ccfdeac4a814cc734a78453dc5ce31af63d722e38c7997581dfcbb86f4beefbd052ea017e8bc32f8cfa48cd1896c3add380e3a123a665c9f944d15f20199f592b321053a3c7b6585c1dfdd0d396386db8b2e502be51973c4ba4896d3d002857eee5e7af4200a4389d2e69065dfc68485a66e700f24168bc7d1583ddc55d0f981e545c16655c1cc2781188e3a036d5fd0d7e57e8fd703d6487c28e25a6b2f98a1eba938057c490748cebef45ae8c0bc37d7e5981ecfd2a5f41b6495d2762cc15d31e8009504dc3fe33bd3815f7c8290b5eab4cc994ef2390792140dba162f5b9aa5f5f06af8a958960b7c1350c95960eaf5a476f92f02661fc88e390eea68b79446de898c4a54086c5819de091819c293a22ff55a0fc0994a9e6bac6c2600380a7f51b04038040ee270f1297a48ab7ce13b1d974036723265116d15c7aab4b7f580d9640a32eb6ee7543499428dc6703cd3836c777e7d3eb8f7a9a1e9f16448da92cb3d8f78e18299a3a3234e02dc59d6417aadb87278ed3a1cd7b00ca1c5058f45d1e593e1922f01ec297a6944c19c5a3146fe8168ec5ec8ca687d69f735223273b262f6277fe25868283225b6fe3a6e53e195b1b046a4960a82d2a8cc09d2ebf37ad60b984b0eedbbcf36af5096bc26c45037dcd0571b0b516602366a0e73d4e98340cbb09c6e9cb2aac3d5a8558456b6b9c825eea005e8282435223e9b8d32cf43a533d82dd0d168199542cffbc6fba56c525fdeaf2b37df653057f527035680f3e77adf68d54d33fdc134e6597abe9a1222af7a9de8f77fde978ba1632ae3ee561feb7f23d69bf1f76d32a2f55b05b9c05117f7e93b14371ff28c8450873d39be48158b4bf188303ce666b72313abb2b4aeca090f399f965e2a170df1995e05e1919675a471bddfa8a93a78dba23d9e7fe320fa3d31c34e021c7b023a534f7b37803bfcce7220a8a776b7cd7d10ad60c3dd47109a439ca1fffc02283b7d28cccdd6b5bbf4cf767d9be7b26e508f78596489fb212313e045f9ac8c7f4a17a16c85b68d9d9d7e9d24e0a006a3c9df4bba681217ce87e5eac594052e0440f67000efbe446ff6e8d3a61c7e1de2fbd36418686274067e21eb36feec0c6e9158f8e4a502563c1d93670a61c4acda86ddee0b4c8d356c196f676140b7d76341f31fb38b7c1a58d233f373922e60e4024e208764504fede5439e2a2b05589b598aa2e4424d9b6cff55942d16290aa546e32a6c2f1957d625958ff4dda90d67f02d93fd62f5e7ce18f2aa90bfd972c38ad3d57c9c22c708a80a822af47053ef30d123160289160b692486f7e844a941737627d3e7aeffb83a8669c94991681b1558a2799e5356299234e740c44dffde8111bea27a86482da92eec4e2ea7887773e0d44a3ff86a8e5025ff0abf62f04d1ca448e76b061f7afc664906a14a983bc5fb52fd1c5f3996b1df4d13f7babb2c3eae4a5195a06f8b138df35579c44b27b5e6c7dfef73fac0156bddbb6cad3ca22ab81c481c82d3ae5829e5cd0d972ebb4d5ac6714b183ed1dab621122515602ce898aad87bb16bbb5ebb5b17a9b56dfc72351e642c98297cbeb7acb8c06dd55361552f0f36a22b4b983735f95e6e1e32a99d631e54a9f9bfab72c98cb5118f66e1aec8a51f126f84b70f7188274a7ad6ed6dc12c9b88a1ebde44fc79982712484b368ae4681a8100477d5ca5ea75c8fac9b0b0e61bfd3a4aaac3b7a5b0b0498b2fc10b5727685d666331ca456adb5bf078e017a03310fcec9f660d94f76820641ab17e532d5ff3a7c0147301263b652aa16b1f8067a703eeec1c0ff07c5817164c735c15db646fd3da4d814d10f9e2f6aa677b17274b5c635a8a0a8e3d2b339bb62d402b69eb951ed3f5b0d667f82d87bacb24a2ffaa1f712df54dc56e133bf89b98152e8363e6c5b6c57bb617531aa02358999997bf2062a432617896c69868cfd74d86c6a19ea89ea9edaaa4ccdc66ac5939d5118ddf49deff4196be0b49a50f97a8b0ab8916122f12d409448d75d15a006254213a6b42b8aa8204b7882f7d250df4267dea75862f7d6e287ff0c26cd2ee1acd3204868155dbaa72cff51b0fddf41ddfff73d35fe039b8954ebd1739b9c2be6e4c0f3775580dc2891fdd9fe5c34e5cb4c3fb19a4f7229002054a5851363ec780dd446a5ccc460b5c46d07dd9a1c93e072e67603e7555e65882e4742c6fefecfa68318d0207c18e459b0fd86408690af59e6f79059247d93936c6a2a77c8b777f23d479e643d30070385746492b03b290a81f241cd776fbef0f074f01f4ed96318dbcfa97a504d97270d280584f6daa2f3a074a34ef9788db3de1ee4d4f96b63dfac161b3137b645a57e06f061fc9a25657e53b3773c3cd4f2eedc69600d509f3c8e95bf1c85025f91ea4b95e6904d9dd058df6c9fd14c22bb92485a1b2437221bfa767333edb352e95554424c102fd50705d4f1fb88bd508e1ed27c4ac41127189f8337ed1a9c56da6de24f8e88167dd80bb93ee84ca96ead399b38c52857af83c64e7f8e8f39b29291893a387c0222f9a5e44b2d928ecf6d10fca468951af5a0468b10a012cfb9608cb6fa3ed7a461463c698f134d107f821f6ff51441f093e059a5c186ba0dbd0a2562bbc58fadfa5de167c39fab7d426ab9e82e7b44b831a37ab0d1039e6667747261d9b7451037295fd90d4e52651e96c53c92ac0ca85d17a966aa5befa26c506707da47a8fc21f2890e035a9c451cb53846829d1436ba1007756682cc0883c6269e6612f15048c57afaf11b644063c4c3845ddb6029e719d25ef9afb5e8c58f2518c557800ca38c25d4f06dd2b85d9fb72bcf07dfad70fdd4fa72d1efa2294132a93365c55f2befb9f0b6291a6b20afa1caf7ff94ad68918ebfe4c9807ce4d730316d89a47acf8e3b1eb1775571b1b19ec846592a18e543321df9a8e849bbbebed1ea83ba730afced8c89143bac14a5420052865abe893239a3bf0fff75a26d5c0dbc39fa0d3cc391f3e533afca3e11bfaa761fa1f7bbcea4973487f06141bf7297724b0f352b18198ea82661f3fe85bbb528c8a614b6ca423009796736bedf945b7d193cbbf2341f39bfdec98335c8ba917f930f20fe6f3a1762308a9348a2399cd932c84d414c024942ede27b09743b26bda4fc64692495147541690b7770fcc91944a6131d878e859df328339c93ae09edceb2f3dc5fa231162824286ddba6a78dbba20502ff418861af1ec495081dac1930c6548bba85690d4b3b69fd1aeb47a1984d328db160eb4fb605a338871f8a4c91c0c686b9f4ae529f2aa85b1715e1045678ff1feb283409826648c7da912b1cbea4d19baa701569a3b092868287919edaacc89694fb789bfbb95e12ec0894d2e491a980f3121172746d625cdf9ae9e2e221d4f151b2efc4c706cfce62ac2700075604e571a33a2ecaf62b648b4cb5f4007d176af323c1434699e6c8ce3f996fbf09d09c5be9d0c069ec868d5b3b6656ff40f98eefc70db70dbdcd0e028a68182deaf9f0cc0cd35cd15459ef7be614ddf2b5339dc90d9262d7a687a24cbd8f7525fd032ac6ee38d18d958484039b785196cae4f6555da58bb26d40dd96222934a1f25c151a64b80b2db7929acba673cf1a810f29f6b57674718baf3ec0af391311b2244c50006a8b05aecb325d9fe4d1dc9e6452bc9ee51c255788481232d4f8e403f9fcf4d5ab05f9248f8a0a73c480d20dd0c1459b263e840ed132285d7f913388056a1544d0322c78ae35531d761e775f5127bc11d388c7e61f23fb97e1430cfb0728336fbc98ad00c27e7d3486aaba8a60f1c2fe2c5e6a671ac0b69b9f4c4ecef6499496d2d132bc3c4424dbfbd369cc46a43e4fdf0460341aa84d05a18608f6fcc823770b85a76eff8c70a9fca3176316120a4aa509cec542dfab311eed84177bfdd009071bca1e555736983a98a1d1ef4739f0ae07ab00db4d4e951b1b60c7b944306cbfe61655b5e317330b5bfcef33a81753a795fda8b116c5e25428bb8efa23cf1b2ab7ed7cf3102b89c87dc924dfbbdad5ae5da3394b6ed0678db394d06ab3f4eda50d304db563eeb9b0909ae916e93e7d374a14bdc98797a69cf54736998b46aea86179edfbfc2d700f17de6615c6caf0948647cfa12554dd6a07ef4de60b1c6a6462b370413639dc9c47bc0c1ae25067693efee5d89d0f9841455f9c160b61e867c00f0ced9d48482a79f917558b451d22de8a90df285cb9aed065035d49b64fc24371c280ea4326e893a7edf85e8b134bc29c672d5228a7aa04092c5897b544696fffea39de1c51251f5a9b726f21914c4da5a0d72386c007f9a2726e4b211ab107e4319e3678b4fc1a5c5a46a91b3e13cd93d353c87d8f4b2946f6e00fa4fab078ea47983cfceac056ddef1cb321617e025e651f3fddab0eee7adc5fa6aa03b73bf337cd4f0a48b9247e79c6b011aa79677a712b5b8607ee6282f6fe214df6886501b748953e1b65b78656508040cd2319fd192ccc9b569320da02b265d7358b9a2513020ec549bf36a643a0929a018689ca4bb853690ec5805bb5f90fc7fb7d62637e7fd310d4292343205d5b969816fbdee04f15fac7d96df20e716ad0155f4f5738c62245c2d8263fb62b196b89d88a2980f68c822479f59eaf062bbe37abf8d35ee5aa96bf42549e6a1e1b95e192d3c70aaae069bbad73de50e51705f4728ef9e1f50bff829361b5f916ac9af01f213c0ed9db3c2a3b050159227a2016b3cb3c936fd4627a32629c6d08ea4a59f47f4e3d27337e1bd8447e59ececbc387d3810b3bc55d80843a0c05a139997481b523cce851be4156429fc37ce072cd1808fbd3064428e8163eb41c69f1584f58c860dc2ce1e8792342136808a2f9b7b750096f039485653d45c55a9be8d4b75832ed37071d26652fd44170107a5804f0eb6d77faf970d29af6069629f378d0f4592103d061789add97069dcbba3fa4f0990d9cadc6c85f9dfb7c417c54c6b64ab971ef85e2affafdab76415c14783cffc8bfa6ac720692e7c25f1b99166932776aaeebbebf542e7f4a1e0a4758ff40db1a1d0b4a7f3289425968b33dc2a3438d30d1fd91a41c59e5308751332dcec5d4390f3cce91d0224bde2e309a7ad8d6be9503269f5887c0c8e3b8ee4f4ce3eb3b9f459880b4394932b22eff0c90e8e087622d8f7e74315dff1f6233ea544a458500f83daf50dc0d02fc07432d0d935409f24631108d1c1c9babad221c63400357e76cda5ffcb0947f912104343bb81197dd375a62006f355424f38a5506890f2a17666a0bf7c2b2f777bcdddc1194ff9a68927f2db35aeeb8c22576793dd2e1564574968c24422ff555fc6ca6cfc612d58f6aa069777c3192aa9ba867d9c71e70ed0aa11072364bee6710b14a86b490a59b6c7a2ce203f3eaec7dbfab959520099da195e9efcc96c0b37c24df01c181af980821fcaa2cb01f227950c9ebc3f83882a35e5fb5014adc482bea02cae66c4e76d21ea597b417c1a5c91f92565e53954bcaf28048c37ce611ca59d008abfc18780ff046874ff32070973c507df02f0977014ddf3d6d5b941a7ef49db4044c3899c0e6da631280bd53119a6bcf0eff91bcbc7c2e57b5c042c4717eb1c109df4b4ccb3e4d96dd6d19c677bfd300fe3fe418e97320c080f46f602a95c4ee7a0ac44ee34ebbc93918f4973b39be4edead08963c99c3559b712d6ddf8e67d18d2ba9b721a178749d657208bd040ea0867e62dffe6d34eedcba77570537913b9120515e2412bf37d766202fd8202ba28ba57b121367749cb49de9f083a7b224658a7a2aa072f6618aa92dc75047de1fa5b21abd35b6e8c50ac9ac9c63f5a590a20db1aa7229410faffef5538a88fe7b06e5340e1d7e90ab299bda21c06235fc89d5bd433789b1d47742c6051b11b1d048861636835a707910914d8923d5fef3c07d60da7492f1fc97528b1b6cb2226c79d88547d68e78aa855e5fec83ac1543a6cd9494e25bd5b6187ea3fab3c1ca95ac447e91e44cf287e0102048c68350bbe085a212a767e7511e7f13d29315e90f34000abd8b939f98d73c14fcda694651a3e7a04fc74c27e072371dda90fbf2a7d5e4121691819e28091df7930df13fc6b11d5c993a616da42330df6be25a3e1a4abb37b7c82f0981eacfdddd0db432c0a2260e0e92401bcf8b6c600e67fce48506bccfefc12c9738917fff2a33f717a5317b42855d9e2d64f79c744745cacf6cae13fbbc4c829b775a9e660604d40eb30bac81a1894a60949f138858e16cf8cb1c92735fd820797d6b37f64329fb127351f81e1f5880049c2a30b3c6d9edc0c2ecf9000339d348f246739bb7066e7c08d8c84f57657b252cc14703280b160273973b185f8663a49833fe8f6e5483ca7691c5bd8e812ad3417b0181b884170040ebe9fda35f87a554adb29a91c731c9ee5b6c99caa466f6b118948f26974539555134a45cccf6a3dca0b5fc8e5942bdfb872030dd54df187c9623e46e53e0f13d069536450c5a21ee9892910a00a649b8250f0a1b0684f9439adf661916cb03106eabbc4aa85596b640b9da3f9dcece72b0b074f0903aa1359e0388bd2f41979d24945a40f2918c091f6ff37a7fd606608c00711fce0bb973de7acd3e273077995887bf9409fde6153188040bff93915e5597bd13d2cf81032799ff468a081bb7266cb554d540450e66d6cc16bc7e7d63d09da3722d7be2f7f13cc7253f04e983ed0dd66cd5f6274fc89c69c48a41128c49557f50e838371bdbf903ab7f065312fca8fc41e9f1a3e4d3c88aa48d830bc1bd4bc4713551833da739ce0644e99d43c6e1b46f591c107c10788013d2ac89df22e5c986b8a1acbb5a44b0af5024d76a4005b214294766f88db66baaf2a39cd2c3a8a8deadf4ac3f6dab65241fe9b57eb830cd95aea51cd07fafdc41825c1da6f80efa8396cf3608ee5d936a3b8f75a456c2c606712f63aa52969696af6e0848bb802d94a26036af3afedad6d5bdf1511cc4b83a4fd88da443bc57dbf259f01abf669651d524cc728192976b08e418971b25867f406908138326c3323ea2ae4d3268f112f202a53caada1e11e18beb2c76cb5aeff4c8f23d965742cbfa4eb8f52f6eae5fb6368ac66251f44a30830c2f1fbcb5587062b5a353d13c2da7927aa50a1bc854c1ed8dce14868e64924e45f7babd4ffe457d43cab142f0d475c0f1750b15391aea7f49d2c314a08c2ad520211b3b4550ea5d39dfbaeab304331a9a692ffe94333ffd89e2fa0e6ef0c1f3e388bcc04b0766524959f2083d2c55e9d711eb52fb72fba55735650fd67387bcb26edb9d6bc6793aabd7beeaecedacf88bfcc587a01be58aacf9cd3604e976a1ac0edef1c63aeec44ece42cb08da7c1e76176126dfbfbe481c2883a9", 0x2000, &(0x7f0000006dc0)={&(0x7f0000006380)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:44:59 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a893a532"}, 0x0, 0x0, @planes=0x0}) 13:44:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x8000000803, 0x0) write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000f00)=0x1000000, 0x4) 13:44:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x1e}}) 13:44:59 executing program 5: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002a80)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 13:45:00 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 13:45:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x7fc}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 13:45:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100), 0xc, &(0x7f0000000880)={0x0, 0x1c}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000001fc0)={0x424, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xed, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ee1b9d9708b0a2e6ff15995ddfffce1385c20a2ddde600b4c9d9f9934435911991a63cd30993767286ee1f021cacc7f774f6b415114e2246a906c6102c3042ff70d5287710e3b46c2963e686e5b213431a0941d9b70ecb42e9f9530a290a114bafcfcb0a849923175da67c7916637fe7bedf906f308a7acd067d7d3902d19c20179befec1683ed2eaef01ffe650daf949113c75048d7274372105362b81b770b48c220774b13f0e1935f156a2de1e729ad943153736c3452666c9390e0d57ccbf9ce1deed40d06f30b0ff8f6953147682265ba678edd3ba71a58dc40e7", @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x19d, 0x0, 0x0, 0x1, [@generic="e12ea28b6b48351535cd8f9ca55e1b2b21cd6cb975a2ed96aa808eb5999395ed8503352b99159ee4ef24a1cc09fcce92adec0a58d9798976355c69ca9e24b7b1ff9f90c65d3ca60bbb28f5c14761e6a36d7faaa8fbc42507fe19fb7d72dbfc98fed397945d2dc8eb3f6b85792c4d9c13a5e8800b2d48172185f8fbdc40761258adec5bed5521c95466cad4ca658895a53e6340b61e46fa467012", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="37d07569529093d733b2a8a465dbf514185851f4de27a4bcffb9ad229cd6eeacea70409d6a500a100489ab1ee1705bc5532f793b82746659b93faa014115195ee1760f553604645a4b13bf59da1691cf1526108b2dcac30c7f55482607d6186a0c836c7b23ad753d0ad0fc4b08975bfe9899d26b8d184dcd6f4e4bc759f028fa7972e51c72ba0429d905ae4857fbf6ca9311a38de54b2dca9a93376dbe0070546915b2dc826022718053eee890e8588c4b94735a402eb4ec7058fcd98c79af08d8c2b0ed5c2f1f0bea5bc0528ab7d99a6a177e08721fa083a53c581d4ccb131be117eeb7f90f7581d2b16515d4b2c534075ae5"]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x165, 0x0, 0x0, 0x1, [@generic="f340cd71cdb110ff24d59e218ab216e2bd8431b27103568dff56afa299ce9fcd8f8550fbda31021080be7b5c18506fecd802440ed9dee5d9e1e60ff2c42532613afebe67970e4ad1db0c455bea915b450329dd8c05910812a7de36086f359cea0f3f3632d6c65334697ed93ae66d3fb0a977aef7e2ca457aa505bd72b8d74ad69c2256f5de", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ce872e4e093efa4d043e643bbbf52838896fb4f2e056efcf8cb9786f28a895ef165e7bbc537b265c1daebd04520881dbcbb424103b4d8fad5c11115cda5335e9edbeb80f3c1e207ed53712fcab2bf41365543f2cb346bc67c8832a57759b79eaafca7a093a90a28a6f200f793ba439941d349a515acf5229931688613dc7372a29f7c55f07a93edf86c3a95f6cd5ef2b01f3be1eaf1fd352ae2699e064dfb5d071", @generic="de604842ca2c8972567e04cdddea1d02cacbcd011fa95d08bf2c4cfb5259cbb61fd5bf2fc6bc78"]}, @typed={0x6, 0x0, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x424}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 3313.856669][T11394] syz-executor.0 sent an empty control message without MSG_MORE. 13:45:01 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000001c0)=[{'IMIX', @val={' \'', 'CD Capture Switch', '\' '}}, {'SYNTH', @val={' \'', 'Mic Capture Switch', '\' '}}, {'SYNTH', @val={' \'', 'Master', '\' '}}], 0x82) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 13:45:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x1e}}) 13:45:01 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="1c", 0x1}], 0x1}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x260) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000012000102000000000a77038f80000000f6"], 0x20}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 13:45:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x3d, &(0x7f0000000180), 0x4) 13:45:01 executing program 0: r0 = getpid() pidfd_open(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/212, 0xd4}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x11c, 0x0, 0x0) 13:45:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100), 0xc, &(0x7f0000000880)={0x0, 0x1c}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000001fc0)={0x424, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0xed, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="ee1b9d9708b0a2e6ff15995ddfffce1385c20a2ddde600b4c9d9f9934435911991a63cd30993767286ee1f021cacc7f774f6b415114e2246a906c6102c3042ff70d5287710e3b46c2963e686e5b213431a0941d9b70ecb42e9f9530a290a114bafcfcb0a849923175da67c7916637fe7bedf906f308a7acd067d7d3902d19c20179befec1683ed2eaef01ffe650daf949113c75048d7274372105362b81b770b48c220774b13f0e1935f156a2de1e729ad943153736c3452666c9390e0d57ccbf9ce1deed40d06f30b0ff8f6953147682265ba678edd3ba71a58dc40e7", @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x19d, 0x0, 0x0, 0x1, [@generic="e12ea28b6b48351535cd8f9ca55e1b2b21cd6cb975a2ed96aa808eb5999395ed8503352b99159ee4ef24a1cc09fcce92adec0a58d9798976355c69ca9e24b7b1ff9f90c65d3ca60bbb28f5c14761e6a36d7faaa8fbc42507fe19fb7d72dbfc98fed397945d2dc8eb3f6b85792c4d9c13a5e8800b2d48172185f8fbdc40761258adec5bed5521c95466cad4ca658895a53e6340b61e46fa467012", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="37d07569529093d733b2a8a465dbf514185851f4de27a4bcffb9ad229cd6eeacea70409d6a500a100489ab1ee1705bc5532f793b82746659b93faa014115195ee1760f553604645a4b13bf59da1691cf1526108b2dcac30c7f55482607d6186a0c836c7b23ad753d0ad0fc4b08975bfe9899d26b8d184dcd6f4e4bc759f028fa7972e51c72ba0429d905ae4857fbf6ca9311a38de54b2dca9a93376dbe0070546915b2dc826022718053eee890e8588c4b94735a402eb4ec7058fcd98c79af08d8c2b0ed5c2f1f0bea5bc0528ab7d99a6a177e08721fa083a53c581d4ccb131be117eeb7f90f7581d2b16515d4b2c534075ae5"]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x165, 0x0, 0x0, 0x1, [@generic="f340cd71cdb110ff24d59e218ab216e2bd8431b27103568dff56afa299ce9fcd8f8550fbda31021080be7b5c18506fecd802440ed9dee5d9e1e60ff2c42532613afebe67970e4ad1db0c455bea915b450329dd8c05910812a7de36086f359cea0f3f3632d6c65334697ed93ae66d3fb0a977aef7e2ca457aa505bd72b8d74ad69c2256f5de", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="ce872e4e093efa4d043e643bbbf52838896fb4f2e056efcf8cb9786f28a895ef165e7bbc537b265c1daebd04520881dbcbb424103b4d8fad5c11115cda5335e9edbeb80f3c1e207ed53712fcab2bf41365543f2cb346bc67c8832a57759b79eaafca7a093a90a28a6f200f793ba439941d349a515acf5229931688613dc7372a29f7c55f07a93edf86c3a95f6cd5ef2b01f3be1eaf1fd352ae2699e064dfb5d071", @generic="de604842ca2c8972567e04cdddea1d02cacbcd011fa95d08bf2c4cfb5259cbb61fd5bf2fc6bc78"]}, @typed={0x6, 0x0, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x424}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:45:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="66530700ae89709438a925d86800278dcff47d010000670f32378f36462700000000000000000dbb9fb045f2d1eaa302ab6c2fef8020fa00eb29884a07da1f7cbee7548f08ad06887c791233fd80b2c992574d5c38cf1b13a73a66faff77bea92c5d8d5ac1adf5ce37ff15e457920611a42173ab8509d1e520a00928a8525e714c87e020cd63754608e40189bf452a068d51ebd70e31075f0000000000000000369148bb7cfe99e2456fd9f8011836186ad0dba13faefa831e7a278c0b8931d079154d58ae7081d89af62695ff040a2866fab7480a692c34f9ba633fb9f9a1aab26e43b5adb50f083acd895062e2b52eff3ae735a79322194a91e64d05bdb77ae2b3a75b405877e8a91f920cff6c2b2c0ecfb8250139027de33b518aa3a8772abd760fa9f4000000000005f1412418784c4cd5ee9d126ee0167be6a7579de83fcc2d447edd23f53c94410c692dae1309c04afce489e4e6f658d34b3c01cbe430520baa3ebeca711089b2b29c0316e502d9791797d6ca9981938abd68098e80d0e18eae8431783ef6cddd095fc915f327a591d726ebd73905018a0b3974ed6a617498ec5dbd19c9faf002f3112af401", 0x1af}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 13:45:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x1e}}) 13:45:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 13:45:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c80)=ANY=[@ANYBLOB="7261770200000000000000000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000002000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000000000067726f75702f73797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000007070747000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000ecffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 3315.203660][T11427] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'raw' [ 3315.248125][T11430] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'raw' 13:45:01 executing program 0: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x8}, 0x293, &(0x7f0000000040)={0x0, 0xe}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000000000600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020007797a30000000000900010073797a300000000008000340020000000900020070bc7a300000000004008480040004800800034000000008140004800c0001"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 13:45:01 executing program 1: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000680)={0x8}, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x989680}, 0x0) [ 3315.537049][T11436] __nla_validate_parse: 3 callbacks suppressed [ 3315.537110][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3315.553229][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3315.769269][T11439] ALSA: mixer_oss: invalid OSS volume '' [ 3315.778209][T11439] ALSA: mixer_oss: invalid OSS volume '' 13:45:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000052000700000080854a36b8ab1c9599161a000100400300000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 13:45:02 executing program 5: unshare(0x20400) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) 13:45:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000001c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 13:45:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 13:45:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 13:45:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x8040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv2(r0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000200)={0x60}, 0x20000260) 13:45:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 13:45:02 executing program 2: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='.%)-\\$\x00', &(0x7f0000000180)="dd", 0x1) 13:45:03 executing program 5: unshare(0x20400) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) 13:45:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 3316.816078][ T32] audit: type=1800 audit(1610891103.434:152): pid=11459 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0 13:45:03 executing program 2: r0 = gettid() process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/118, 0x76}], 0x1, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000000400)=""/246, 0xf6}], 0x2, 0x0) 13:45:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000034fa1d0809122323e9e2010203010902120001000002000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000001d00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x1, 'J'}, 0x0, 0x0, 0x0, 0x0}) 13:45:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13:45:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) 13:45:04 executing program 5: unshare(0x20400) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) 13:45:04 executing program 4: epoll_create(0x1ff) 13:45:04 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0x7d, 0x0, &(0x7f0000000780)=0x8) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 3317.651852][ T54] usb 2-1: new high-speed USB device number 54 using dummy_hcd 13:45:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xe86, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0x802c550a, &(0x7f0000000080)=@usbdevfs_connect={0xce72}) 13:45:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 3317.921423][ T54] usb 2-1: Using ep0 maxpacket: 8 13:45:04 executing program 5: unshare(0x20400) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) 13:45:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000340)="c403292116deb8010000000f01c1480fc76e1e1ec4e1a816c00f00d2440f785b5a6566400f3881352f000000c74424004e000000c744240257760000ff1c24b97e0300000f3266440f3a42e3c0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3318.216075][ T54] usb 2-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 3318.225399][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3318.234309][ T54] usb 2-1: Product: syz [ 3318.238578][ T54] usb 2-1: Manufacturer: syz [ 3318.243356][ T54] usb 2-1: SerialNumber: syz 13:45:04 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) [ 3318.327249][ T54] usb 2-1: config 0 descriptor?? [ 3318.419632][T11522] user requested TSC rate below hardware speed 13:45:05 executing program 5: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x34, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 3318.841938][ T54] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 3319.279405][ T54] usb 2-1: USB disconnect, device number 54 [ 3320.102023][ T54] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3320.381517][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 3320.663290][ T54] usb 2-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 3320.672838][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3320.680956][ T54] usb 2-1: Product: syz [ 3320.685579][ T54] usb 2-1: Manufacturer: syz [ 3320.690273][ T54] usb 2-1: SerialNumber: syz [ 3320.741980][ T54] usb 2-1: config 0 descriptor?? 13:45:07 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 13:45:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 13:45:07 executing program 5: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x34, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:45:07 executing program 0: clock_gettime(0xbfd98c57330f9eb1, 0x0) 13:45:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) 13:45:07 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) [ 3320.801864][ T54] usb 2-1: can't set config #0, error -71 [ 3320.853079][ T54] usb 2-1: USB disconnect, device number 55 [ 3321.128859][T11574] NFS: invalid root filehandle [ 3321.158159][T11575] NFS: invalid root filehandle 13:45:07 executing program 0: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 13:45:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e22, @multicast2}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414bb, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 13:45:08 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 13:45:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) 13:45:08 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) 13:45:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000006380)={0x0, 0x0, &(0x7f0000006340)={0x0}, 0x1, 0x0, 0x4}, 0x0) 13:45:08 executing program 5: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x34, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:45:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000c6d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180), 0x10) 13:45:09 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 13:45:09 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x1, 0x5, 0x0) tkill(r2, 0x1000000000016) 13:45:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) 13:45:11 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:11 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 13:45:11 executing program 5: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x34, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:45:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) 13:45:11 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:12 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) 13:45:12 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:12 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:13 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001400)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045006, 0xd00700) 13:45:13 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="16"], 0x14}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 13:45:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x800000000000}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@dev}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x0, &(0x7f0000001000)={0x77359400}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="6802000001050000000000000000000000000000540201000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000a72e14988404ecfff124af978057c2daff"], 0x268}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:45:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mlock2(&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0) 13:45:18 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:18 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) clone(0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0)="414c52ccee3658bbe5292861dbd7750e3fd548dc667e") mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) 13:45:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x0}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 13:45:18 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x38, 0xd5, 0x31, 0x20, 0x2040, 0x2950, 0x5e9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5a, 0xf6, 0x65}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13:45:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x800000000000}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@dev}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x0, &(0x7f0000001000)={0x77359400}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="6802000001050000000000000000000000000000540201000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000a72e14988404ecfff124af978057c2daff"], 0x268}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 13:45:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x800000000000}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@dev}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x0, &(0x7f0000001000)={0x77359400}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="6802000001050000000000000000000000000000540201000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000a72e14988404ecfff124af978057c2daff"], 0x268}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 3332.592599][ T2967] usb 5-1: new high-speed USB device number 6 using dummy_hcd 13:45:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, r1, 0x409, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x34}}, 0x0) [ 3332.677173][ T54] usb 2-1: new high-speed USB device number 56 using dummy_hcd 13:45:19 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) [ 3332.861424][ T2967] usb 5-1: Using ep0 maxpacket: 32 13:45:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) [ 3333.534945][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3333.546149][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3333.556250][ T54] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3333.566297][ T54] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 13:45:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x2}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x800000000000}}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@dev}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x0, &(0x7f0000001000)={0x77359400}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="6802000001050000000000000000000000000000540201000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000a72e14988404ecfff124af978057c2daff"], 0x268}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 3333.576312][ T54] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3333.586177][ T54] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3333.713101][ T2967] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=5e.9e [ 3333.722768][ T2967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3333.730856][ T2967] usb 5-1: Product: syz [ 3333.735295][ T2967] usb 5-1: Manufacturer: syz [ 3333.739998][ T2967] usb 5-1: SerialNumber: syz [ 3333.890671][ T2967] usb 5-1: config 0 descriptor?? 13:45:20 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x100020}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x7a0a, 0x0) [ 3333.943540][ T2967] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 3334.023413][ T54] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3334.032764][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.040950][ T54] usb 2-1: Product: syz [ 3334.045362][ T54] usb 2-1: Manufacturer: syz [ 3334.050167][ T54] usb 2-1: SerialNumber: syz [ 3334.170378][ T3870] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 3334.180073][ T3870] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 3334.189581][ T3870] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 3334.198840][ T3870] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 3334.208882][ T3870] pvrusb2: Failure uploading firmware1 [ 3334.214570][ T3870] pvrusb2: Device initialization was not successful. [ 3334.221511][ T3870] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 3334.233625][ T54] usb 2-1: selecting invalid altsetting 1 [ 3334.370622][ T2967] usb 5-1: USB disconnect, device number 6 [ 3334.377457][ T2967] pvrusb2: Device being rendered inoperable [ 3334.431816][ T54] cdc_ncm 2-1:1.0: bind() failure [ 3334.446276][ T54] cdc_ncm 2-1:1.1: bind() failure [ 3334.501947][ T54] usb 2-1: USB disconnect, device number 56 [ 3335.143467][ T2967] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3335.411528][ T2967] usb 5-1: Using ep0 maxpacket: 32 [ 3335.871668][ T2967] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=5e.9e [ 3335.880854][ T2967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3335.889397][ T2967] usb 5-1: Product: syz [ 3335.953867][ T2967] usb 5-1: config 0 descriptor?? [ 3335.972521][ T2967] usb 5-1: can't set config #0, error -71 [ 3336.005587][ T2967] usb 5-1: USB disconnect, device number 7 13:45:22 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) 13:45:22 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) 13:45:22 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000004026093333400000000001090289d6fd666921"], 0x0) 13:45:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000100)={0x14}, 0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x20000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:45:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) 13:45:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f00000021c0), 0x8) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='85baa174f0cb1142', 0xfffffffffffffffb) 13:45:23 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x10012, r1, 0x0) syz_usb_ep_write(r0, 0x0, 0x2, &(0x7f0000000180)='\x00[') [ 3336.862207][ T1248] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3336.946001][T11793] user requested TSC rate below hardware speed 13:45:23 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000006eb09f0e4231cff4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005"], 0xa4}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10973, 0x0) [ 3337.242893][ T1248] usb 3-1: config index 0 descriptor too short (expected 54921, got 36) [ 3337.251731][ T1248] usb 3-1: config 102 has too many interfaces: 253, using maximum allowed: 32 [ 3337.260731][ T1248] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config [ 3337.271490][ T1248] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 253 [ 3337.281602][ T1248] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 13:45:23 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) [ 3337.290886][ T1248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:45:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f00000021c0), 0x8) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='85baa174f0cb1142', 0xfffffffffffffffb) 13:45:24 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) 13:45:24 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) [ 3338.104720][ T1248] usb 3-1: USB disconnect, device number 20 13:45:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000000580)=[@clear_death], 0x0, 0x0, 0x0}) 13:45:25 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f00000021c0), 0x8) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='85baa174f0cb1142', 0xfffffffffffffffb) [ 3339.023224][ T1248] usb 3-1: new high-speed USB device number 21 using dummy_hcd 13:45:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xb4c, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x5e, 0x4) sendmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0xfc00) 13:45:26 executing program 5: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) 13:45:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0xb, &(0x7f0000000240)=""/194, &(0x7f0000000340)=0xc2) 13:45:26 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f00000021c0), 0x8) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='85baa174f0cb1142', 0xfffffffffffffffb) [ 3339.464828][ T1248] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3339.473127][ T1248] usb 3-1: can't read configurations, error -71 [ 3339.504857][T21933] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3339.751587][T21933] usb 4-1: Using ep0 maxpacket: 8 [ 3340.302678][T21933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3340.313520][T21933] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3340.325080][T21933] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3340.338610][T21933] usb 4-1: config 1 interface 0 has no altsetting 0 [ 3340.622241][T21933] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3340.632185][T21933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3340.640303][T21933] usb 4-1: Product: syz [ 3340.644828][T21933] usb 4-1: Manufacturer: syz [ 3340.649715][T21933] usb 4-1: SerialNumber: syz [ 3341.639333][T21933] usb 4-1: USB disconnect, device number 66 [ 3342.421426][ T1248] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3342.611359][ T1248] usb 4-1: device descriptor read/64, error 18 [ 3342.881390][ T1248] usb 4-1: new high-speed USB device number 68 using dummy_hcd 13:45:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:45:29 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(0x0, 0x0) syz_io_uring_setup(0x56fa, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x90, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) 13:45:29 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {0x0, 0xe}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb", 0xf}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 13:45:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="ced5b5453d85cfb297aad587d56a7914c85a33a78271b59763ef0b6e526f6b6e9f764c131aeef08d947ee6028bc91502aeba8a0c9d74f0f9b016411d55cc45fb964a5a2da0c07233cde68b2df700e305e72184a6ced4daa21f8069e56f173a61925f14ccbfd7694f74e39340feae2a67bd6f7e34a4eb238e", 0x78}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x30) 13:45:29 executing program 2: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x571, 0x0, 0x3b5}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x170}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4}, 0x14) 13:45:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3343.119468][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3343.199395][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3343.549025][T11892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xb0, 0x0, @in6}]}, 0x38}}, 0x0) 13:45:30 executing program 4: io_setup(0x80, &(0x7f0000000000)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qrtr-tun\x00', 0x20802) io_submit(r0, 0x1, &(0x7f00000027c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 3343.807894][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:45:30 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:45:30 executing program 2: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x571, 0x0, 0x3b5}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x170}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4}, 0x14) 13:45:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @link_local}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 3344.201408][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3344.227423][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:30 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000002c0)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) [ 3344.407958][T11924] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3344.551888][T11928] bond1: (slave bridge9): making interface the new active one [ 3344.568072][T11928] bond1: (slave bridge9): Enslaving as an active interface with an up link [ 3344.579781][T11930] device bond1 entered promiscuous mode [ 3344.586183][T11930] device bridge9 entered promiscuous mode [ 3344.628981][T21933] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 3344.810969][T11921] device bond1 left promiscuous mode [ 3344.816736][T11921] device bridge9 left promiscuous mode [ 3344.877634][T11924] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3344.948943][T11924] bond1: (slave bridge10): Enslaving as an active interface with a down link [ 3344.958817][T11928] device bond1 entered promiscuous mode [ 3344.964984][T11928] device bridge9 entered promiscuous mode [ 3344.975843][T11921] device bond1 left promiscuous mode [ 3344.981386][T11921] device bridge9 left promiscuous mode 13:45:32 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:45:32 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:45:32 executing program 2: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "d277f96b0226e704b186e57e690c84da78c60bf175b2f327d2bd85ee43637608dcdef7ea93edfad1d87df851643906f3d824a342f8c3e9a63618d304228a31f391c7e2fed2f607b5b6e075a3eb3fe38d28d3e145172b92f67a722f0796784134938879aeb0dee90c2e9936df0f4f219b69c0e8569590a3dbdd91b6ea849297b55ba61e015485743f92ef1ce1c5cdf65f610177b0bd91f74f33dc99542ed99590f29054d178049ca15884fbc555904f951898a54647c091758f29c38bcad01e8fcaccebf9c2699350b87c3d5cdda727c4422a5690d79f382ae37e3a413654fb8c63f448bef307124aa36dfc4e32f1206f93163d869b04ddc0554100"}, @TCA_RED_PARMS={0x14, 0x1, {0x571, 0x0, 0x3b5}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x170}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4}, 0x14) 13:45:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x308}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:45:32 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_udplite(0xa, 0x2, 0x88) 13:45:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc}}, @NHA_ENCAP_TYPE={0x6}]}, 0x38}}, 0x0) [ 3346.142523][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3346.178893][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x308}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:45:33 executing program 1: r0 = memfd_create(&(0x7f0000000240)='user\x00', 0x0) write(r0, &(0x7f0000000040)="00e6", 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb2, 0x0, &(0x7f0000000000)) 13:45:33 executing program 2: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x571, 0x0, 0x3b5}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x170}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd1186dd", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4}, 0x14) 13:45:33 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_RSVP_PINFO={0x20}]}}]}, 0x68}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3346.808612][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3346.921547][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:45:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0xffffffffffffffff], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x14, &(0x7f0000000000)={r2}, 0x8) 13:45:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x308}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:45:35 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:45:35 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000040), 0x10) 13:45:35 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4bfdc, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "6acf4be19ed09278", "4d0f268b7dd78b3382a01b9cd2ff600f", "ba5b9dbd", "baa281bde5832e34"}, 0x28) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) recvfrom$unix(r0, &(0x7f0000000280)=""/144, 0x90, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x849fc000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 13:45:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) select(0x40, &(0x7f0000000000)={0xa}, 0x0, 0x0, 0x0) 13:45:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x308}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:45:35 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_udplite(0xa, 0x2, 0x88) 13:45:35 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000040), 0x10) 13:45:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)={0x38, r1, 0x701, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x38}}, 0x0) 13:45:36 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000040), 0x10) 13:45:36 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000040), 0x10) 13:45:36 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 13:45:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="dc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000000)) 13:45:38 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:45:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0xd54}, 0x10) write(r0, &(0x7f0000000200)="200000001a00010200000066835f7f081c000000000000586500000004000300", 0x20) 13:45:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}}, 0x0) 13:45:38 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010"], 0x40}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 13:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "e9"}}]}, 0x13c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:45:38 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_udplite(0xa, 0x2, 0x88) 13:45:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x3, 0xa, 0x8, 0x0, 0x1}, 0x40) read$alg(r0, 0x0, 0x0) 13:45:38 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xc31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x5, 0x0, 0x3, 0x3, 0x8, 0xffff}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019a40)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4042041}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x4, 0x0, 0x6, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x200000000000023e, 0x10000, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000030600000000000000000a1000000000000000000000080017004e244e2414000100fe800000000000000000005638000000"], 0x38}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x4}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x6, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/102400, 0x19000}], 0x1) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 13:45:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "e9"}}]}, 0x13c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:45:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000000)=""/29, 0x1d) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000000040)=[{r5}], 0x1, 0xffbffff9) dup2(r4, r0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x16) [ 3352.386790][T12123] IPVS: ftp: loaded support on port[0] = 21 13:45:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) 13:45:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "e9"}}]}, 0x13c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:45:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) 13:45:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "e9"}}]}, 0x13c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 13:45:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) 13:45:41 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xc31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x5, 0x0, 0x3, 0x3, 0x8, 0xffff}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019a40)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4042041}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x4, 0x0, 0x6, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x200000000000023e, 0x10000, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000030600000000000000000a1000000000000000000000080017004e244e2414000100fe800000000000000000005638000000"], 0x38}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x4}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x6, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/102400, 0x19000}], 0x1) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 13:45:41 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_udplite(0xa, 0x2, 0x88) 13:45:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) [ 3354.882455][T12182] IPVS: ftp: loaded support on port[0] = 21 13:45:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) 13:45:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) 13:45:41 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="39000000130009006900000000000000ab00800020000000460001070700001419000100100000080000506800000000ff00ef38bf461e59d7", 0x39}, {}], 0x2) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="390000001000090468fe07002b0000fe0100ee002000000045000c070307001404001800120003000e04000001000000000000000000000020", 0x39}], 0x1) [ 3355.456501][T12195] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3355.466499][T12195] : renamed from bridge_slave_1 [ 3355.502329][T12195] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 13:45:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) [ 3355.993762][T12202] bridge0: port 2() entered disabled state [ 3356.009454][T12207] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3356.021608][T12207] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 13:45:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/28, 0x1c) getdents(r2, &(0x7f0000000140)=""/217, 0xd9) 13:45:43 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="39000000130009006900000000000000ab00800020000000460001070700001419000100100000080000506800000000ff00ef38bf461e59d7", 0x39}, {}], 0x2) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="390000001000090468fe07002b0000fe0100ee002000000045000c070307001404001800120003000e04000001000000000000000000000020", 0x39}], 0x1) 13:45:43 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x89e0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:45:43 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1027a00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) sendfile(r0, r1, 0x0, 0x1004) [ 3357.314483][T12235] bridge0: port 2() entered disabled state [ 3357.368078][T12238] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3357.379713][T12238] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 3357.468393][ T32] audit: type=1800 audit(1610891144.083:153): pid=12243 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15759 res=0 errno=0 [ 3357.564329][ T32] audit: type=1800 audit(1610891144.143:154): pid=12244 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15761 res=0 errno=0 13:45:44 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x89e0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:45:45 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xc31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x5, 0x0, 0x3, 0x3, 0x8, 0xffff}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019a40)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4042041}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x4, 0x0, 0x6, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x200000000000023e, 0x10000, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000030600000000000000000a1000000000000000000000080017004e244e2414000100fe800000000000000000005638000000"], 0x38}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x4}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x6, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/102400, 0x19000}], 0x1) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 13:45:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1027a00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) sendfile(r0, r1, 0x0, 0x1004) [ 3358.906018][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3359.049551][ T32] audit: type=1800 audit(1610891145.663:155): pid=12261 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15759 res=0 errno=0 [ 3359.270998][T12266] IPVS: ftp: loaded support on port[0] = 21 [ 3359.473386][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:45:46 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x13, 0x221, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "04b513f0"}]}, 0x54}}, 0x0) 13:45:46 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="39000000130009006900000000000000ab00800020000000460001070700001419000100100000080000506800000000ff00ef38bf461e59d7", 0x39}, {}], 0x2) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="390000001000090468fe07002b0000fe0100ee002000000045000c070307001404001800120003000e04000001000000000000000000000020", 0x39}], 0x1) 13:45:46 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x89e0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:45:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f766972745f776966690014001680100001800c000700f7ffffff"], 0x54}}, 0x0) 13:45:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1027a00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) sendfile(r0, r1, 0x0, 0x1004) 13:45:46 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xc31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x5, 0x0, 0x3, 0x3, 0x8, 0xffff}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019a40)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4042041}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x4, 0x0, 0x6, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x200000000000023e, 0x10000, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000030600000000000000000a1000000000000000000000080017004e244e2414000100fe800000000000000000005638000000"], 0x38}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x4}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x6, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/102400, 0x19000}], 0x1) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 3359.723266][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3359.875745][ T32] audit: type=1800 audit(1610891146.493:156): pid=12303 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15759 res=0 errno=0 [ 3359.966515][T12299] IPVS: ftp: loaded support on port[0] = 21 13:45:46 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1027a00, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) sendfile(r0, r1, 0x0, 0x1004) 13:45:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 3360.404224][T12309] bridge0: port 2() entered disabled state [ 3360.483476][T12310] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3360.495237][T12310] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 13:45:47 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x89e0, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 3360.652721][ T32] audit: type=1800 audit(1610891147.273:157): pid=12317 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15759 res=0 errno=0 [ 3360.748930][ C0] sd 0:0:1:0: [sg0] tag#6962 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3360.759758][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB: Test Unit Ready [ 3360.766977][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.776960][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.786934][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.796836][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.806745][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.816625][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.826825][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.836770][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.846683][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.856583][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.866482][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.876476][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3360.886371][ C0] sd 0:0:1:0: [sg0] tag#6962 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3361.072488][ C0] sd 0:0:1:0: [sg0] tag#6963 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3361.083239][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB: Test Unit Ready [ 3361.089902][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.099866][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.109792][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.119709][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.129639][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.139551][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.149469][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.159465][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.169380][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.179357][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.189260][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.199361][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3361.209310][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[c0]: 00 00 00 00 00 00 00 00 13:45:47 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="39000000130009006900000000000000ab00800020000000460001070700001419000100100000080000506800000000ff00ef38bf461e59d7", 0x39}, {}], 0x2) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="390000001000090468fe07002b0000fe0100ee002000000045000c070307001404001800120003000e04000001000000000000000000000020", 0x39}], 0x1) 13:45:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getpid() 13:45:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb21be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4000000007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a6757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d264673301883128266b6201eacdfe51736c31f7feb6f6030a10e69c903927a5c11effd62911abc72d261c2eeb0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d42644ff87aec60a58a490e012785e2d04eba58a52cc9f15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459abdaf4f37ba61dc89567451000000000000000000da5fad4927bcc92b26fc45"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 3362.040147][ T32] audit: type=1326 audit(1610891148.653:158): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x7ffc0000 [ 3362.160170][T12344] bridge0: port 2() entered disabled state [ 3362.199346][ T32] audit: type=1326 audit(1610891148.693:159): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45e219 code=0x7ffc0000 [ 3362.221021][ T32] audit: type=1326 audit(1610891148.693:160): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45e219 code=0x7ffc0000 [ 3362.238939][ C0] sd 0:0:1:0: [sg0] tag#6964 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3362.242679][ T32] audit: type=1326 audit(1610891148.703:161): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x7ffc0000 [ 3362.253088][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB: Test Unit Ready [ 3362.274283][ T32] audit: type=1326 audit(1610891148.703:162): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x45e219 code=0x7ffc0000 [ 3362.280714][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.280812][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.280899][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.280998][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281208][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281306][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281401][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281498][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281590][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281684][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281773][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281874][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3362.281961][ C0] sd 0:0:1:0: [sg0] tag#6964 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3362.545476][T12345] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3362.557317][T12345] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 13:45:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000100)="00000002", 0x4) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="230000000f0007041dfffd946f610500020000001f00000000000800050016000400ff", 0x23}], 0x1}, 0x0) 13:45:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 13:45:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd9, 0x8281) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8004550f, &(0x7f0000000080)={0x8000a0de, 0x15, [{0xf}, {0xe, 0x1}, {0xb, 0x1}, {0xd, 0x1}, {0x8}, {0xe, 0x1}, {0xe, 0x1}, {0xf, 0x1}, {0xb, 0x1}, {0x7}, {0xf, 0x1}, {0xf, 0x1}, {0x3, 0x1}, {0x5}, {0xe, 0x1}, {0x6, 0x1}, {0x8, 0x1}, {0xc}, {0xc, 0x1}, {0x1}, {0xe, 0x1}]}) 13:45:51 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0db6020a84", 0x12}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x180ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) 13:45:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 13:45:51 executing program 0: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x7f, 0x0) 13:45:51 executing program 0: r0 = inotify_init() r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000009540)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000009900)) [ 3364.546873][ C1] sd 0:0:1:0: [sg0] tag#6912 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3364.557558][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB: Test Unit Ready [ 3364.564376][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.574250][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.584140][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.594087][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.604112][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.614021][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.623895][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.633975][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.643954][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.653934][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.663932][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.673818][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3364.683719][ C1] sd 0:0:1:0: [sg0] tag#6912 CDB[c0]: 00 00 00 00 00 00 00 00 13:45:51 executing program 2: select(0xfdec, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, &(0x7f0000000000)={0x77359400}) 13:45:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 13:45:51 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0xfffffc07]}, 0x5c) 13:45:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) [ 3365.404075][ C1] sd 0:0:1:0: [sg0] tag#6913 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3365.415059][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB: Test Unit Ready [ 3365.421848][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.431730][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.441617][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.451580][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.461528][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.471477][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.481439][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.491375][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:45:52 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x541b, 0x0) [ 3365.501329][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.511349][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.521322][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.531282][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3365.541313][ C1] sd 0:0:1:0: [sg0] tag#6913 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3366.452978][ C1] sd 0:0:1:0: [sg0] tag#6914 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3366.463850][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB: Test Unit Ready [ 3366.470637][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.480555][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.490484][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.500449][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.510331][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.520250][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.530126][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.540002][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.549891][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.559860][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.569806][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.579745][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3366.589748][ C1] sd 0:0:1:0: [sg0] tag#6914 CDB[c0]: 00 00 00 00 00 00 00 00 13:45:54 executing program 3: unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140), 0x0, 0x0) 13:45:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000840)=0x2, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9aabcbf87c673ed9b752c0d1eca0a4c9a63a29f7447dcd3ec73256d4262d6c44", "335ba6296f1df1d0d4c35921ecac6eb7164e40e9dd36ecff6952ea14b7ce14e362cf2e35da24c70b3b722a8a383d985a", "01040311304304ac2fa64d1a721563589a2c78f5e5db77d7711cb9b5", {"11bcc8e3bf2abc070011db493b572b0b", "c900905b06271433f07cb637e600"}}}}}}}}, 0x0) 13:45:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 13:45:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) 13:45:54 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="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", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) 13:45:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x145) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000008c0)=ANY=[]) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000002c0)) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 3367.526824][ C0] sd 0:0:1:0: [sg0] tag#6915 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3367.539313][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB: Test Unit Ready [ 3367.546317][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.556227][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.566118][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.576118][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.586056][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.595972][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.605899][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.615808][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.625783][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.635705][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.645635][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.655543][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.665473][ C0] sd 0:0:1:0: [sg0] tag#6915 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3367.773871][ C0] sd 0:0:1:0: [sg0] tag#6916 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3367.784587][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB: Test Unit Ready [ 3367.791545][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.801568][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.811495][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:45:54 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="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", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) [ 3367.821538][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.831467][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.841554][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.851618][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.861546][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.871555][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.881450][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.891380][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.901272][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3367.911197][ C0] sd 0:0:1:0: [sg0] tag#6916 CDB[c0]: 00 00 00 00 00 00 00 00 13:45:54 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52eee7b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) 13:45:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0000100}]}) 13:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 13:45:55 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="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", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) 13:45:55 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="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", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) [ 3368.580245][T12418] user requested TSC rate below hardware speed 13:45:57 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x101001, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "29639d2809d68ef88faa7346cde8e090a100"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="07cad0f297eaa09807fbd03ef00ec5385df07b34f8a50eb90612ed5633a9f55e51f2d43976f97cb1ca0d777e4e3d727fed6fae6e813540d91f0f59b5b5ba9d59cf0a24c2e4a3d3031d9909bd83f7b7e80f0f59fb0d", 0x55}], 0x1) 13:45:57 executing program 1: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x3) 13:45:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0000100}]}) 13:45:57 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="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", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) 13:45:57 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000d80)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52eee7b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x6) 13:45:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) [ 3370.835699][T12451] user requested TSC rate below hardware speed 13:45:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x74}}, 0x0) 13:45:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) 13:45:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:45:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0000100}]}) 13:45:57 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)) [ 3371.500104][T12473] user requested TSC rate below hardware speed 13:45:58 executing program 5: socket$kcm(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x8a040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff00a}], 0x1}, 0x6d70) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008045) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="d9664720d7b5809f20e854d47c896e224a41f20c5711a5e0a84fe351c9f15f7b555149ca94f6ee", 0x27}, {&(0x7f0000000300)="4afd22c0a42158d66ba1f1565326228735afecf459119ce989166985e06323ca293c1e98bf82f4fa1f96669b03678eabc3be1c64a881923c19505c8c9f3f43b080eacedc45c51a99828d167b2f1a976d3987694e1f3962ff730a4f0a404fc6099140f4f785bb4fa2e41bd250bdb01512c8092ad2cd7f8b989d3d773846ce243f7820e6fccbcf3a8ef52e0e0dd654", 0x8e}, {0x0}, {&(0x7f0000000280)="105db0532299ed76040493218e6a509aca4bd839d639", 0x16}, {&(0x7f00000003c0)="ac1131bb3de33dcd84cac1ec0f4288fff0b32a63a6ae1444a9b0d113312e594f1fd30e54f5b83cc2102fd464f8d7a15bcb7b33eae24925602605e826482ebffbda70a31f686ae461c10936368b2be61e1bca62a5f5a771496794a370c56a9f8d8b9879c30620fdcd72bc98ec676278d9774f225f224d2bd6c79851ea78cab7d62dcf974ce32be2ef282563e7372d787b27be5048d4b4392f91afd98e5e", 0x9d}, {&(0x7f0000000480)="09ff0bc1c7c7e16742c28798faf735ab030e7f2d10d450e71e293b7d3151e018c5eaffa9b405ac355a8e78ffa90faf9777c37db0057ba7f528044f16381eaf2d8a6d46f4b9f314f29db484cf53d85c6a10b36ed8bf785670070514ea33900ce2be4cd1f1dfb9c3869ca1c8f6549138f6381c8eb816a88352cf0bc719275920a22d5d7a498883955c2c6afbc58a2297b134bc9a56dd9e2b5177e752b59cd77dafdec0622a6ac7b90a49bcbd83708b76b96398093ba68951a273cb8774e0c833619685f4df1c5f9888f015ffdae50d6c6a6ee2c0532a4d41d483f25cb9d5bb36f562e571", 0xe3}, {0x0}, {&(0x7f0000001440)="6bb7822191ca28f410fc7d6d6b91e6cd5608c1facdbbb029fa7d74bc8998498809bd71581fe68372a6197caaa6a8f32cfe64fcde044bd9e4185062966ebe7ba39428c1c5b52afcfc9936b58bcb5c8a7cf73bbfe26fec35ccb21ef303ecc8460bd7915fa65fadfac06edb3667bf80e5df071714aaff40fd733af71cc8c5c406f4ae8801ca0aeba213dc8242ff4fcc7a049104e38293f6f6cd2822ca9554471fe456d66c35b797b669c82415c0e99b8d30a34239c22931093f5d8b3d7d37b50b66105104585755907617027196d053b6c6768188d093c228f857f6f26badb258828eb7801c4dfc2f5ea046669e71d5518f8abdbf28569b67b421ae1c612717c9a81f5007840f8d0ddbfcaba36622b4c153063350d40b0994e0cb3dcb15ba4fbdc9bd7e2e25e205e928a5223bc5055d4c83b79b6d4be67d591a65af19886b6e70d59441268376fe430e901b5fe1c37f92cc8bb352fc42e77cdd145e21b4347f6236b152ca37e219fbe4632ae270b3f244ed010096aebc98cba9edf8487c5c7874f9d1a4cc997952185ade4baa8ba0843d5d64b58d16b53d7caff59ace14f12e863e8b2ea5ab78e7872fc4613f584d6af0a23626e1334edff0d70cf6818f0a721f238cd0ac3588b353a1f09148d8d4145337b88739570df42c0e26f5c3d3c03a1b6fd1bf3e4553044e9fb1ba8ffba6533ba924028207912ec462bf36cc5b7e8e34e9187bd2bf033ba9d31f8f91dcb451650a7da342633de44843d05f9114d3c4c91cd6eea0c9cf4564b06193cb1602587cb340a4959e285a8613c3e2ee1b6e239ea2ae3d804347fc117c9d4d132a3016c04d2080644c2ed9227762d4def155ebaefe830ed5e3c76bdb8cd992cc8c461a4db83e724c98f29242f661d7e76c08fd7a4dab7359b595400b72c26aa2ef254fa5725ece83d0e4533731ab40e219491b28d186267a4341b23a16e6aa259a707baa7d794a101597aeb33a4eb7642b219376c83495cc41e0489f5fb2425d4110ef51263aa17aac7685278e980d5a0d9cdb0902bfba524443b007089069f413a03b3fac74b442d13c4ad277c27c4fe342c637917f9137399f48988d87d4f7b6f60cbfd82c513dfcf00d7b065f5c0dc892c0b8755c82fb9ab8ce5b5f4641f661688a8b3f9e5ebe348cf83dbba753fe78c85ada0b6bc0c1e39a58b8265a298160f0bfb3285f6e66d6dfafb1322bb9ae3a41f9bedf9d280574d93bb41e22053a00a5173eb532d3e3e0ec5b4ba7caa5a786db03e40b376d972f9ddbbae7189d9cecca558032e818be3f33ee5a7022dbf20e5e95253ab48452f9ce2861c84c0b22a698dce8b384d822bc2abd8f4e75075f5a1ad3b15ccf4482f22e939317643128181d658177c8ca4488daacf28d57fbbfbaba84e923cb063af4fe8fdf06da4299fa92da386eb74dd00782c05ffda25f7ee5422679cbda195fbbb8c47a96d801d59c4d32696eb761c58519901fa4830864012815304ca8d987c5b044ae6b98a835e1dde5f770fd96d9098ee5dc82550a15b79c83fa5cffdca41239da97ee76364fa5cc0404ff0dedc852115fba775d2684ffee25a9cba3322e6a128882d0c2bc96638ca6043c82e08c4359227f857eb3190ec56f3415a3d29db226510cad3a95bca9df58b724afcc0bc08924ef7ec906b90b0f68f72f6f695c063b446bf8bd350623251ee345ba19d180d3f19fc39c2afc779147da6bc159bce928064a69e14193a574688bf0ce1cdc75857089f4ef4b9d301597b32cea2180d9c8e51eb5f7faebe40a60f747f14ed71f4736c08b46bc5be316baabbe94329011babcd645a7c8faee61eda4f216eb2ff7696cfec84d3d2cf630c3fa9d0484a2a6ceb8efd2e6e14a74f17a3b6bed2385fd4bd8d34679f2b6d2bde6e8b72a4fda1dba95ee6dec491db5f2dc306e1042aee05d0b515a6ac519916c049684914427679aaaec424c54dc7b0caefdd51ce12e1e778d8ee22dcf852824441c60be7e7a4511b582c6c77415829850afd273610729ab630db400390e8504b96323e470afa618414b49a84a66aacac291569dd5403bb5ed7697b26c70471ce4fe816ebf8dabbc870fc1c9d72ba18fd0fc0c3fa43aa94573ad140f88c86fa95973c35d664b7a513f58a1928c37688696c99c44a961b3c823554091ea084a7a2f9aabcc4348a647a8fe0d966862f3bffe6e3097b7eebbcf490a4b4c062214c21249733799de5d8afd8462fa7555495cb13bc368480c7c52c04546cda69b05f9db9e07712717848c2adead8812ed48acf5559f05fb575cdd199291cd6a2f60db6ba80b8770fd67a4d7a12a5b406267c4d5724ee556ca40f7b94e704ab15605903cfaa6afa4a6de6325f9278b62b1620e1cb519f79888092aee37d7d0dc2bb10592acaeaf18744004425183eb4fdfdb8908b97110acc2c105d3b9a8702d4a55cf748d3589cb4052c338bd395448d0fcee20208061fa03e7cd3c0d8e75e2e5f011c3e59fdfdd5760fa5220e8aacb31a7c8617d228f6927d49e40be22a84b9747d07dc53906a1af9df8341c1376970d2e685d7555c59dc41b97e66c9a3792e0f43a9a6a2f8a53a117c119b3eb8de0ac977d4e031890130e63ce14f173ad97a66be110dd26e5e822d56171763c41b98aa565f123905549475eba4db62469e4f5030358b3ead1950d1118b35f3a59c759904d7f5ebff6b76767d3a39fee678836932bbf7276d287fc98f8e68b345195264880cca7e7c935a1f1b6366b731942346e49f6d4e069d1b5429f195c2421ee921e8e3600bdf15df8d14b559dbc4905e14bdf1f8c4ab638135c6bf21606fd4da85603cd4aaa16b7eab7e0521aea08d971f4410b81deffdc3f149c5002d4028a657e41c0965901e60702c407072121b95036612c8461923f0f4016e98a666d0ef5620962d4630f46dc648a6eccce7fe6df291266dee314534980a3a6a8367263346fc537a7aad4c5fce78a6f2ec274555055f0f011617fdc8e5fa326b68400e5ff2c01aaac22cf479cebf8b7b207274a0305d5009defd49eef8e07b95a4c8dccd8b50271894ba1c051dc5b23ffac417bdc1ba397f39558d514f26458059a64bdd193446683dabfde044f593e2d59dbec9a1f241ed3190fe0b92e1c95e3f486068ae0639e96d9dcc02e925c31aa298e514f6e893641882defc49da8ec7ff8fdac6ca620516d72a181780b16ba6260b754523992fd73f94ebd964ddcda79a64cba3b8010f724787687e56903d428d3b12e3c6a10ee6e467175270b45158af2710194da3e1b9d940e55011514cf92fb94b764c5d697975d2e4f999f9c47a820174fe3ce4a32e740dd173a16bcb0351d1857544533abd687872c26f73aab57d88da6fd18b66d13a1caa6b02ca061495ecf972cd0aac7e4b2c37ee4941f15ca299e34786c624a55628d98b98675745391de6dc0134f6da1149e43d713f60e0f8c8ded135969a6af84a96638e30756cbb3320b28b2a3228c68c3e1b466c1cf7b6e126692001047af2962563f747bd2ba4dd87c0a8e391789676ee9d24746bb6c04f1e7e19cede7f5373f9557984048dbe780333f976593c840fa9e1a71f1a1efb3f6dd9dd3053ae53d2ef0ae4d84484d92e881298576e4d88d4a2cc984835ff849c2434ccaa011ab60a46a477261e2d2d4f7524c73f9cb6654cd21b26d082ad590483c0e68922042ae14190679f2b732b0f9894425d9cc11e61d1c2cd667bf8537a87ed69605ca05d76e8f2feafe41cc7991dddc5f453acfa5e0dae7c7162bc8b66dc5fa36327e2af3f8a0e26f03ebe34a107e5e8ad2412e6ab5d6195c2d1eaac6f513dd864af71776d99b2a628224d083e2dd43034a7b082e6037c6dc0abddacb9831382a5d50455baf60cdad1d74d7a2b9156b6701ae3783c751e5462dd51f4719b0310d00c2632a28c0c62e6b4667ae80ce038534e17d4e0c5488bbf046e240a452c783fde96d871effee73b01ffacaa091fdc1f2d953f41ee81ecbe2673cd49973628d240cbdb44e79bf25b62e89869a11b1d601e299d84f6808ef5fe1dbcf8064f96cc5673e07d5462cc8276b8b8de49b76a165061a916bab67e3546b5d7e6b3509551dfe45886d02862fab8f923766e5e8e6847410774d959a740089333d7a26b71b7ae3cfddfbe2f0fc96a9265d6dd28ad0cecadb594292407eb6ab0cfb9af44ca9bdba820c82efedd60d623cc31e4a581131207e9fa20092640ddafd5e29e0f6fa705d1cd3d51164663e531caa63c502e2f1420209da94f5ecc2e89d76d63181cdb15610c51c80d75bba8167fdb5dac3817aa1d6026d00d3bc3c7ad2f59c93286d2be36526b545378f12bcf9144bcc056aa68a513169d365b0432b8d0d3032920e08a102b54b5d5d999e9cb51450a3019ba4ad742c9e21c005e023327a6e7cae9fbdf719d96ea60148383ac85c03bffb5e008da838a6efb71e69171f826b816e7bdb4a4349811af8eb2ba2fe450094bb8039f58b90b437870a8fa3d8557ab3af89f72fd4b4e19407fc57d35d2b90c799b1e7e0379cffad50f9266c396e9a7b3a1df11078f072490b3236e95c0584de192675cea19f28aec65595939ae441f4e05edc36f8ec2ed1eb91a5d9548f3b063f3b344003fcaebdd87b9207098a705dfb35601c35fba9bc03f8d8a632aef435bc540fe0c0c59c35dd047a65475c1193600d789118b09d986255e10dfeb5d2df9672e83412c65e7b21414ded87924683f763bbebe60192368083241acd47229b9993bc3f24c90731a38a6ebde4cec481b1025d08d89dec644f2b4c48d1b2497101e2813a45262df662f18e1b7b6caecb43f9476e15c7379463683d64e1bf13684261542f3f6131a0e5db53677697b96221df8df7aada09735c3e38182a73662c89b16b9108241dea8467dd33a3dd8f89345e1925e80de22c757864b2f91e0a101da0240ba2e39bda2c5f9d9368c83b8e333724ba570fa2afde71e428ca00ca2ada64d2ecad4681c946eb1ad917ceb5f321b91e041dfedf9eb96f24b864775cfb2ec9ff3b75788dea3bbaa4e4a1cda240de7a0f91ec42b58a0beb66b62865a66aa4922ef731bab030fc7030de6b2895c9d907cf0407e7d7c2e25f946998eb574965e8a5bef5c0968723426bc290a478a4694be9cd04404adf8c5e0cd5bb9aa988022ba3340a459dc0218ca61e3e6d4671df2dc6e761fb6c658575ae8830c639b335e984999f7e9a9d45a793cb7211f2a6774b0257e58abe8e398378087bc63bbbfdc68d012449fbca793d616a9398ef14cc46a9856b76ca1f32bca2a68fa69c8be834ecc15e8ffd9a4adf8f833464a0788cf8ea675424fe94c558029cd9685cf60e6d2db04b0b462aba6d15bd7d45b379b3d293a7a18fda89c59ebf7805a7964ea5089a56a01cab2f98dfdb5e27fef3961820da782ce8c2991c71a301ea26abbc665348b03015f17bdfa17e009b695987c880c827e3608c9bc1a24a846da72fd4040e48d201b5a5b03e74669ef40849537ec605dbba9e7d9980fce89e7085da35f9782baa93a07628", 0xf42}, {0x0}], 0x9, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xc0}, 0x4800) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xa00}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) [ 3372.121631][T12484] [U] ꠘ>8]{4V3^Q9v| [ 3372.127977][T12484] [U] w~N=ron5@YY [ 3372.131156][T12484] [U] $ Y 13:45:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x80, {0x57, 0x3ff, 0x3f, {0x6e, 0x8}, {0xff, 0x401}, @cond=[{0x2, 0x2, 0x1f, 0x6, 0xf2, 0xffff}, {0x81, 0x6, 0x40, 0x1, 0x7f, 0x3}]}, {0x57, 0x8000, 0x2, {0x3d34, 0x53eb}, {0x7fff}, @rumble={0x3, 0x1}}}) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)={0x14, 0x1c, 0x201, 0x0, 0x0, "", [@generic='X']}, 0x14}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0xbe4a237e90908916}, {{@in6=@empty}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0xb04, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x17}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) 13:45:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)) 13:45:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) 13:45:58 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:45:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0000100}]}) 13:45:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x7}) 13:45:59 executing program 5: syz_emit_ethernet(0x1a, &(0x7f0000000900)={@link_local, @random="e315ed5439e5", @val={@void}, {@generic={0x8864, "ff21104bec040e68"}}}, 0x0) 13:45:59 executing program 0: r0 = memfd_create(&(0x7f0000000240)='zDN\xf8){\x86\x87T<\xf6i\xbe{\x14\x10\x1f\xa6J\xa3W\x03\xe3 <\t\xe9\xd2\t%\xdctr\xc65\xba\xcc\x84^\x15\x1dDR\x8c\xaf^\r\xc0V\xf5=\xf1W\x1aF\xcaX\x87\x8c\a\x8a]G5\xf8L\r\xa2\xc8\x90\xc2(hW\\\x96\xd6\xa2~%\x06\x95R\xcd\v\xd7\x98=3b1\xb30xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:46:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xd6, &(0x7f0000000280)="7cd96333e981f052d911d85c08272ae80100c30000000300004486b13a850e6d4d26317fd5be6ba0e821f206e55447dc18a1441775a0b54c0189f674607957a3685ababc99384031ea72b80ae65a62d020bb624853068d1a65724ed6ec94656a6f27c2bdfcd59103799a95967ec763a27211c3b536ec0f4d8b3a88c373b32e1919f3f072821c18daa284f99e4b09ee1ffd4ccb97babf145d15fc30f56063bbb99e6b46c586d4f902d9eaf6f42bad7a820c70179a511f7fc2ddff27d180fcdf2679c531e437a86da6d8b23700ffe2f8439d47a436c5da"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x1b) 13:46:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x66, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 13:46:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)) 13:46:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400eb05000080000000000000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) [ 3374.274128][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:01 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0189436, 0x3ffffc) 13:46:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x66, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 13:46:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400eb05000080000000000000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 13:46:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 3374.955622][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x66, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 13:46:01 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts={{0x18}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}], 0x30}}], 0x2, 0x0) [ 3376.175523][ T1248] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3376.421740][ T1248] usb 4-1: Using ep0 maxpacket: 32 [ 3376.561457][ T1248] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 3376.570563][ T1248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3376.589201][ T1248] usb 4-1: config 0 descriptor?? [ 3376.636341][ T1248] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3376.841636][ T1248] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 3376.849333][ T1248] visor: probe of 4-1:0.0 failed with error -71 [ 3376.890215][ T1248] usb 4-1: USB disconnect, device number 69 [ 3377.641375][ T54] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3377.891529][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 3378.033003][ T54] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 3378.042236][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3378.071822][ T54] usb 4-1: config 0 descriptor?? [ 3378.126396][ T54] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3378.336670][ T54] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 3378.344720][ T54] visor: probe of 4-1:0.0 failed with error -71 [ 3378.384790][ T54] usb 4-1: USB disconnect, device number 70 13:46:05 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) 13:46:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400eb05000080000000000000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 13:46:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x66, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 13:46:05 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) 13:46:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:46:05 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c}, 0x24) listen(r0, 0x0) [ 3378.615511][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x28}}, 0x0) 13:46:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000000000000, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8) 13:46:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x3}}}}}, 0x28}}, 0x0) 13:46:05 executing program 2: syz_genetlink_get_family_id$net_dm(0x0) 13:46:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400eb05000080000000000000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 13:46:05 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') [ 3379.249868][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3379.931593][ T54] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3380.177027][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 3380.311597][ T54] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 3380.320823][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3380.349953][ T54] usb 4-1: config 0 descriptor?? [ 3380.409165][ T54] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3380.624694][ T54] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 3380.632394][ T54] visor: probe of 4-1:0.0 failed with error -71 [ 3380.648924][ T54] usb 4-1: USB disconnect, device number 71 13:46:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 13:46:07 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) 13:46:07 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x2, 0x0) 13:46:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:46:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 13:46:07 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 13:46:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x5d, 0x61, 0x46, 0x40, 0x1b3d, 0x135, 0x2d7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x11, 0xe2, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001d00)={0x2c, &(0x7f0000001b00)=ANY=[@ANYBLOB="000801"], 0x0, 0x0, 0x0, 0x0}) 13:46:08 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 13:46:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x7ff, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000002080)="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", 0x0, 0xffffff7f, 0x0, 0x0, 0x0}) 13:46:08 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000100)='y\r', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 13:46:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x10) 13:46:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r2, 0x0, r0, 0x0, 0xf10, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:46:08 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) [ 3382.021428][ T1248] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 3382.382788][ T1248] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0135, bcdDevice= 2.d7 [ 3382.392281][ T1248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3382.438052][ T1248] usb 2-1: config 0 descriptor?? [ 3382.486096][ T1248] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 3382.602236][T22714] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3382.691668][ T1248] usb 2-1: Detected FT232BM [ 3382.891621][T22714] usb 4-1: Using ep0 maxpacket: 32 [ 3382.911934][ T1248] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3382.932273][ T1248] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3382.946625][ T1248] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3382.980976][ T1248] usb 2-1: USB disconnect, device number 57 [ 3383.035357][ T1248] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3383.046109][ T1248] ftdi_sio 2-1:0.0: device disconnected [ 3383.292582][T22714] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 3383.302018][T22714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3383.319712][T22714] usb 4-1: config 0 descriptor?? [ 3383.389556][T22714] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3383.621764][T22714] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 3383.629453][T22714] visor: probe of 4-1:0.0 failed with error -71 [ 3383.674209][T22714] usb 4-1: USB disconnect, device number 72 [ 3383.711483][ T2967] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 3384.122114][ T2967] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0135, bcdDevice= 2.d7 [ 3384.131543][ T2967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.144322][ T2967] usb 2-1: config 0 descriptor?? [ 3384.185231][ T2967] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 3384.412485][ T2967] usb 2-1: Detected FT8U232AM [ 3384.422961][ T2967] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3384.445023][ T2967] usb 2-1: USB disconnect, device number 58 [ 3384.482478][ T2967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3384.493034][ T2967] ftdi_sio 2-1:0.0: device disconnected 13:46:11 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b1547e204c053800bf6c000000010902120001000000000904"], 0x0) 13:46:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 13:46:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9fd, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000040)={0x40980001, 0x0, "5ba547cd5187b4d813e1e099babc1912b90fa4cc3c5e6658a7fd9ba364681561"}) 13:46:11 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffffff}}]}]}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 13:46:11 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 13:46:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x1ff}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800400000000000", 0x24) [ 3384.759232][T12787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3384.800706][T12793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:46:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 13:46:11 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000040000000000100000000a0001007273767036"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:46:11 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x114, 0x2721, 0x0, 0x807400) 13:46:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x2}]}}]}, 0x44}}, 0x0) [ 3385.248672][T12797] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 3385.259446][T12797] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 3385.300403][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3385.348583][T12803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3385.439233][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3385.458028][T12797] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 3385.468850][T12797] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 3385.509983][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3385.524138][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3385.535684][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3385.570144][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 13:46:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 13:46:12 executing program 1: unshare(0x8000400) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) [ 3386.495655][T22714] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3386.753483][T22714] usb 4-1: Using ep0 maxpacket: 32 [ 3386.891837][T22714] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=6c.bf [ 3386.901664][T22714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3386.912888][T22714] usb 4-1: config 0 descriptor?? [ 3386.999198][T22714] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3387.215225][T22714] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 3387.223093][T22714] visor: probe of 4-1:0.0 failed with error -71 [ 3387.259107][T22714] usb 4-1: USB disconnect, device number 73 13:46:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 13:46:14 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x80, 0x7e, 0x90, 0x40, 0xc45, 0x610a, 0xfd92, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x61, 0x44}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000001380)=ANY=[@ANYBLOB="00003900000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13:46:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5409) 13:46:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getpeername$inet6(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40840}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14}, {0x14, 0x35, 'team0\x00'}]}, @IFLA_MASTER={0x8}]}, 0xe0}}, 0x0) 13:46:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) [ 3387.849864][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:14 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xfffffe6f) [ 3387.983457][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 13:46:14 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xcc\xa4\n\x93\t.EDH\xb6\x93@\xcc\x89\xd5\xb4\x1d \xd5Yq\xe0Ss\xff\xbe\xf5CW\x1d\xda\x0f\xbd@i\xb5\xb5\x8fM\xddU\x10\xaao\x9e\x88\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r+\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x1fg\x99v\x04\x8c\x06\xfd\rH\xaf\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xc5\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9\x80\x11\xb0\x00', 0x0) mq_unlink(&(0x7f0000000080)='/proc/thread-self/attr/exec\x00') write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x560) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 13:46:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a815f231f60914ff2a8e50fbf383199b4ecfa0fca6e1a78698a01410c23cf9dd25e6ea", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 3388.231488][T21933] usb 5-1: new high-speed USB device number 8 using dummy_hcd 13:46:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) close(r0) [ 3388.607214][T21933] usb 5-1: New USB device found, idVendor=0c45, idProduct=610a, bcdDevice=fd.92 [ 3388.616488][T21933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3388.711759][T21933] usb 5-1: config 0 descriptor?? 13:46:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x7fff, 0x1, 0x1}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000f, 0x11, r0, 0xf2151000) [ 3388.761367][T21933] gspca_main: sonixj-2.14.0 probing 0c45:610a 13:46:15 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141142) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) dup(r0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:46:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0xca641) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1a2, @time}) 13:46:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) [ 3391.604487][T21933] gspca_sonixj: reg_w1 err -71 [ 3391.665062][T21933] sonixj: probe of 5-1:0.0 failed with error -71 [ 3391.682479][T21933] usb 5-1: USB disconnect, device number 8 [ 3392.361400][T10816] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3392.721554][T10816] usb 5-1: New USB device found, idVendor=0c45, idProduct=610a, bcdDevice=fd.92 [ 3392.730869][T10816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3392.742509][T10816] usb 5-1: config 0 descriptor?? [ 3392.788595][T10816] gspca_main: sonixj-2.14.0 probing 0c45:610a 13:46:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x319, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00002900000088290090a6895aefd79b8742cb1e075a6a2c922a8bb666b2dfea01dcba9f5bf786628143c25b5fff"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:46:19 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='0m', 0x2}], 0x1) 13:46:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050706c7f3aa52e14ad400000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0xc}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000100000000000000000400000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080008007462660010000280f6"], 0x3c}}, 0x0) 13:46:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0xf5ffffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) 13:46:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000fbff00000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 13:46:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a815f231f60914ff2a8e50fbf383199b4ecfa0fca6e1a78698a01410c23cf9dd25e6ea", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 3392.891764][T10816] gspca_sonixj: reg_w1 err -71 [ 3392.899082][T10816] sonixj: probe of 5-1:0.0 failed with error -71 [ 3392.938407][T10816] usb 5-1: USB disconnect, device number 9 [ 3393.088338][T12941] new mount options do not match the existing superblock, will be ignored [ 3393.115080][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3393.178095][T12936] new mount options do not match the existing superblock, will be ignored [ 3393.239895][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6}}]}}]}, 0x4c}}, 0x0) 13:46:20 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 13:46:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x4b6b, 0x0) [ 3393.539954][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3393.591937][T10816] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3393.636688][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3393.831601][T10816] usb 5-1: Using ep0 maxpacket: 16 13:46:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents(r2, 0x0, 0x0) 13:46:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) [ 3393.952900][T10816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3393.964341][T10816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3393.974391][T10816] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3393.987572][T10816] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 3393.996939][T10816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:46:20 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) [ 3394.180858][T10816] usb 5-1: config 0 descriptor?? [ 3394.576018][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3394.657978][T10816] wacom 0003:056A:0319.0086: collection stack underflow [ 3394.665680][T10816] wacom 0003:056A:0319.0086: item 0 2 0 12 parsing failed [ 3394.714770][T10816] wacom 0003:056A:0319.0086: parse failed [ 3394.721010][T10816] wacom: probe of 0003:056A:0319.0086 failed with error -22 [ 3394.824268][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3394.861563][T10816] usb 5-1: USB disconnect, device number 10 [ 3395.651346][ T2967] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3395.891365][ T2967] usb 5-1: Using ep0 maxpacket: 16 [ 3396.013509][ T2967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3396.024739][ T2967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3396.034858][ T2967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3396.048236][ T2967] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 3396.058128][ T2967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3396.083322][ T2967] usb 5-1: config 0 descriptor?? 13:46:22 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000000000000004dd6000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073797a30002e37000900010073797a3000000000080003400000000022000200b717fa41", @ANYRES16, @ANYRESHEX], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 13:46:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xa, @multicast1=0xe0000005}]}}}]}, 0x3c}}, 0x0) 13:46:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x1a, 0x0, 0x0) 13:46:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents(r2, 0x0, 0x0) 13:46:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000fbff00000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) 13:46:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a815f231f60914ff2a8e50fbf383199b4ecfa0fca6e1a78698a01410c23cf9dd25e6ea", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 3396.332876][ T2967] usbhid 5-1:0.0: can't add hid device: -71 [ 3396.339180][ T2967] usbhid: probe of 5-1:0.0 failed with error -71 [ 3396.405705][ T2967] usb 5-1: USB disconnect, device number 11 [ 3396.477027][T13030] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:46:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents(r2, 0x0, 0x0) 13:46:23 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x1, 0x40}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x8) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) sysfs$3(0x3) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004011, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) getdents(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) [ 3396.595620][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80000001}, 0x10) bind$tipc(r3, 0x0, 0x0) dup3(r2, r3, 0x0) 13:46:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents(r2, 0x0, 0x0) [ 3397.236807][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:23 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x2}, {0x6, 0x0, 0x0, 0x50000}]}) 13:46:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000001040102000000000000000000000000060006400000000005000100010000000a0002000000000704"], 0x48}}, 0x0) [ 3397.635401][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:24 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 13:46:24 executing program 2: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r0, &(0x7f0000000100), 0x2d) semop(r0, &(0x7f0000000040)=[{}, {}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 13:46:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x1c1040, 0x0) dup2(r0, r1) ioctl$TIOCL_SELLOADLUT(r1, 0x560d, &(0x7f0000000240)={0xb}) 13:46:24 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x100, 0x2d, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='/dev/kvm\x00'}, @generic="43634ca2cc9ff63e765bf8475283e214cd3712960016c9884bf3ff58d66a724109c9e7f50286d3a9521d2815090c83d759872ead43f5b121060979141c88ada1929cd07cdac22622cee8818227f7fb30c2ba6d7521c15cd111ef62c18f3f7fa73ed4d6b8b124eb8835ad58061401463fc9c4f3f7e2ee2075a8810b887339a3d192f6d639c2ed80b44a3fd2b00c6bec2fd0893d4f63203e6af919370e748cc6f84544142ea631f7d64778c6d6f9abfd8321d28c6530637d031d5851ed75613e22563ad1eff600428a375ce5cbf1ef845c728cfc33cf9d8bab39"]}, 0x100}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x3, 0x0, {0x0, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xa8a, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x859, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3398.150669][T13069] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 3398.150669][T13069] The task syz-executor.2 (13069) triggered the difference, watch for misbehavior. [ 3398.277655][T13071] user requested TSC rate below hardware speed [ 3398.350817][T13078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3398.354289][T13076] user requested TSC rate below hardware speed 13:46:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000fbff00000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 3398.666680][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7a203a2cff784e4107038f7de913a8cc557e51a9531e05a2b54d1d017590d0dee49e03fad82b5a3780a815f231f60914ff2a8e50fbf383199b4ecfa0fca6e1a78698a01410c23cf9dd25e6ea", 0xf0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 13:46:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="02000000e33437fc", 0x8) 13:46:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xae60, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0x2, 0x0, @sint}]}) 13:46:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 13:46:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) syz_emit_ethernet(0x3b, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x19, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "a6e3ae856e75231a534a516d1d"}}}}}}, 0x0) 13:46:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000fbff00000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 3399.826696][T13111] device syzkaller1 entered promiscuous mode 13:46:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 13:46:26 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001500)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000980)) 13:46:26 executing program 2: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) [ 3400.277720][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3400.322952][T13128] device bond2 entered promiscuous mode [ 3400.383588][T13153] device bridge25 entered promiscuous mode [ 3400.390877][T13153] bond2: (slave bridge25): Enslaving as an active interface with an up link 13:46:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="66530700ae897094e71b0fb1f138a925d86800278dcff47d01000067dd32378f364600000000000000000dbb9fb045f2d1eaa302ab6c2fef8020fa00eb29884a07da1f7cbee7547a405704878afe50a73a66faff77be062c5d8d5a", 0x5b}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 13:46:27 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e0200000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0f114a655a560000000049d2e181baf9459c5c953948c6653872ecbbf63acd0099fe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e54da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600"/164], 0xc4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = dup(r0) accept4$tipc(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x10, 0x80000) readahead(0xffffffffffffffff, 0x100000001, 0x7) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl:\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00010040fffffffe00000005416900840067000009049078e0000002ac1414aa440812c000000005830fa9ac1414aaac1414aaac1414bb8211292cff85ce24be0e8cad295b6a051b44149ec30a01010000000000ffffffff00000004440cec900000000300000004000727c6e0000001e0000001e0000002e0000002ac1414320a0101020000000000000000e0000002"]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x5, 0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c040000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000010000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c800028084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000100050083fc00003f008081040000000104fc3f95b4000001043f0503000000090003000200000008003a02ffff0000ff008105060000000100810304000000050002444f000000400001e103000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400feffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000080080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040094020000080007000000000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ce00000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008300000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x42c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffff, 0xe0500) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0x80044100, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="050000060000000000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000004000000000000200000000000000000f9ffffff00000000"]) write$sndseq(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:46:27 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x10d, 0x11, &(0x7f0000000000)="380902c0", 0x4) [ 3400.689053][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3400.742149][T13153] device bridge26 entered promiscuous mode [ 3400.749483][T13153] bond2: (slave bridge26): Enslaving as an active interface with an up link [ 3400.927403][ C0] sd 0:0:1:0: [sg0] tag#6963 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3400.938089][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB: Test Unit Ready [ 3400.944973][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3400.954878][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3400.964792][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3400.974709][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3400.984555][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3400.994419][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.004281][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.014152][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.024013][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.033888][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.043727][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.053558][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.063367][ C0] sd 0:0:1:0: [sg0] tag#6963 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3401.214822][ C1] sd 0:0:1:0: [sg0] tag#6964 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3401.225533][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB: Test Unit Ready [ 3401.232313][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.242178][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.252003][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.262615][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.272542][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.282413][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.292312][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.302174][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.312054][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.321941][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.331799][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.341672][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3401.351608][ C1] sd 0:0:1:0: [sg0] tag#6964 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3401.573662][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) r3 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r3, &(0x7f0000003480)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x8, r6, 0x0, 0xfeffffff}, 0x80, 0x0}}, {{&(0x7f0000000140)=@caif=@rfm={0x25, 0x3, "cd1e4b3ff3c500745875ea3661b900"}, 0x80, 0x0}}], 0x2, 0x0) 13:46:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000140)=0x7fff, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000180)="9e", 0x1, 0x0, 0x0, 0xe8030000) 13:46:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090201888f6b90"], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13:46:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 13:46:29 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e0200000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0f114a655a560000000049d2e181baf9459c5c953948c6653872ecbbf63acd0099fe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e54da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600"/164], 0xc4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = dup(r0) accept4$tipc(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x10, 0x80000) readahead(0xffffffffffffffff, 0x100000001, 0x7) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl:\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00010040fffffffe00000005416900840067000009049078e0000002ac1414aa440812c000000005830fa9ac1414aaac1414aaac1414bb8211292cff85ce24be0e8cad295b6a051b44149ec30a01010000000000ffffffff00000004440cec900000000300000004000727c6e0000001e0000001e0000002e0000002ac1414320a0101020000000000000000e0000002"]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x5, 0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c040000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000010000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c800028084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000100050083fc00003f008081040000000104fc3f95b4000001043f0503000000090003000200000008003a02ffff0000ff008105060000000100810304000000050002444f000000400001e103000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400feffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000080080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040094020000080007000000000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ce00000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008300000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x42c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffff, 0xe0500) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0x80044100, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="050000060000000000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000004000000000000200000000000000000f9ffffff00000000"]) write$sndseq(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:46:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3ff) [ 3402.954796][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3402.965723][ C0] sd 0:0:1:0: [sg0] tag#6965 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3402.977067][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB: Test Unit Ready [ 3402.983829][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3402.993710][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.003602][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.013550][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.019115][T13209] device bond3 entered promiscuous mode [ 3403.023474][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.038770][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.048642][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.059024][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.068931][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.078843][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.088699][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.098567][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3403.108428][ C0] sd 0:0:1:0: [sg0] tag#6965 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3403.165207][T13251] device bridge27 entered promiscuous mode [ 3403.172648][T13251] bond3: (slave bridge27): Enslaving as an active interface with an up link 13:46:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3ff) 13:46:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000140)=0x7fff, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000180)="9e", 0x1, 0x0, 0x0, 0xe8030000) [ 3403.631608][T22714] usb 2-1: new high-speed USB device number 59 using dummy_hcd 13:46:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 13:46:30 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e0200000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0f114a655a560000000049d2e181baf9459c5c953948c6653872ecbbf63acd0099fe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e54da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600"/164], 0xc4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = dup(r0) accept4$tipc(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x10, 0x80000) readahead(0xffffffffffffffff, 0x100000001, 0x7) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl:\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00010040fffffffe00000005416900840067000009049078e0000002ac1414aa440812c000000005830fa9ac1414aaac1414aaac1414bb8211292cff85ce24be0e8cad295b6a051b44149ec30a01010000000000ffffffff00000004440cec900000000300000004000727c6e0000001e0000001e0000002e0000002ac1414320a0101020000000000000000e0000002"]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x5, 0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c040000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000010000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c800028084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000100050083fc00003f008081040000000104fc3f95b4000001043f0503000000090003000200000008003a02ffff0000ff008105060000000100810304000000050002444f000000400001e103000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400feffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000080080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040094020000080007000000000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ce00000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008300000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x42c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffff, 0xe0500) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0x80044100, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="050000060000000000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000004000000000000200000000000000000f9ffffff00000000"]) write$sndseq(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:46:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3ff) [ 3403.996863][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3404.002049][T22714] usb 2-1: config index 0 descriptor too short (expected 34817, got 68) [ 3404.015182][T22714] usb 2-1: config 107 has too many interfaces: 143, using maximum allowed: 32 [ 3404.024365][T22714] usb 2-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config [ 3404.034901][T22714] usb 2-1: config 107 has 0 interfaces, different from the descriptor's value: 143 [ 3404.091609][T13268] device bond4 entered promiscuous mode [ 3404.127951][T13270] device bridge28 entered promiscuous mode [ 3404.135605][T13270] bond4: (slave bridge28): Enslaving as an active interface with an up link [ 3404.212331][T22714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3404.222097][T22714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3404.230203][T22714] usb 2-1: Product: syz [ 3404.234659][T22714] usb 2-1: Manufacturer: syz [ 3404.239378][T22714] usb 2-1: SerialNumber: syz 13:46:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000140)=0x7fff, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000180)="9e", 0x1, 0x0, 0x0, 0xe8030000) [ 3404.337482][ C0] sd 0:0:1:0: [sg0] tag#6973 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3404.348119][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB: Test Unit Ready [ 3404.354872][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.364719][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.374675][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.384523][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.394398][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.404240][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.414036][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.423946][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.433788][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.443650][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.453543][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.463445][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3404.473484][ C0] sd 0:0:1:0: [sg0] tag#6973 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3404.684151][T22714] usb 2-1: USB disconnect, device number 59 13:46:31 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xf0}) 13:46:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3ff) [ 3405.451328][T21933] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 3405.889463][T21933] usb 2-1: config index 0 descriptor too short (expected 34817, got 68) [ 3405.898340][T21933] usb 2-1: config 107 has too many interfaces: 143, using maximum allowed: 32 [ 3405.908343][T21933] usb 2-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config [ 3405.919628][T21933] usb 2-1: config 107 has 0 interfaces, different from the descriptor's value: 143 13:46:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090201888f6b90"], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13:46:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 13:46:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000140)=0x7fff, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000180)="9e", 0x1, 0x0, 0x0, 0xe8030000) 13:46:32 executing program 4: socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e0200000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0f114a655a560000000049d2e181baf9459c5c953948c6653872ecbbf63acd0099fe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360627ec60cb274e54da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600"/164], 0xc4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = dup(r0) accept4$tipc(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x10, 0x80000) readahead(0xffffffffffffffff, 0x100000001, 0x7) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl:\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00010040fffffffe00000005416900840067000009049078e0000002ac1414aa440812c000000005830fa9ac1414aaac1414aaac1414bb8211292cff85ce24be0e8cad295b6a051b44149ec30a01010000000000ffffffff00000004440cec900000000300000004000727c6e0000001e0000001e0000002e0000002ac1414320a0101020000000000000000e0000002"]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x5, 0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c040000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000010000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c800028084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000100050083fc00003f008081040000000104fc3f95b4000001043f0503000000090003000200000008003a02ffff0000ff008105060000000100810304000000050002444f000000400001e103000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400feffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000080080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040094020000080007000000000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ce00000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004008300000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0x42c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffff, 0xe0500) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0x80044100, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="050000060000000000000000000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000004000000000000200000000000000000f9ffffff00000000"]) write$sndseq(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:46:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278d", 0x22}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 13:46:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xf0}) [ 3406.061768][T21933] usb 2-1: string descriptor 0 read error: -71 [ 3406.068274][T21933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3406.078367][T21933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.182166][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3406.200294][ C0] sd 0:0:1:0: [sg0] tag#6974 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3406.211050][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB: Test Unit Ready [ 3406.217774][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.227665][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.237522][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.247415][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.257322][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.267147][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.276932][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.286741][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.296573][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.299212][T13341] device bond5 entered promiscuous mode [ 3406.306407][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.306501][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.331543][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3406.341510][ C0] sd 0:0:1:0: [sg0] tag#6974 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3406.342553][T13352] device bridge29 entered promiscuous mode [ 3406.356717][T13352] bond5: (slave bridge29): Enslaving as an active interface with an up link 13:46:33 executing program 2: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r0, 0x0) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(0xffffffffffffffff, r3, &(0x7f0000000140), 0x0) [ 3406.663326][T21933] usb 2-1: can't set config #107, error -71 [ 3406.696016][T21933] usb 2-1: USB disconnect, device number 60 [ 3407.093241][T21933] usb 2-1: new high-speed USB device number 61 using dummy_hcd 13:46:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delroute={0x24, 0x19, 0x1fd, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, "8b"}]}, 0x24}}, 0x0) 13:46:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) unshare(0x20040400) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, 0x0) 13:46:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/current\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000001) dup3(r0, r1, 0x0) [ 3407.462252][T21933] usb 2-1: config index 0 descriptor too short (expected 34817, got 68) [ 3407.470729][T21933] usb 2-1: config 107 has too many interfaces: 143, using maximum allowed: 32 [ 3407.479949][T21933] usb 2-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config [ 3407.490470][T21933] usb 2-1: config 107 has 0 interfaces, different from the descriptor's value: 143 13:46:34 executing program 4: setreuid(0x0, 0xee00) mq_open(&(0x7f0000000000)='*\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x2, 0xffffffff}) 13:46:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x6, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) [ 3407.685104][T21933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3407.694496][T21933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3407.702915][T21933] usb 2-1: Product: syz [ 3407.707176][T21933] usb 2-1: Manufacturer: syz [ 3407.711961][T21933] usb 2-1: SerialNumber: syz [ 3407.918867][T13414] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3407.928530][T13414] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3408.077976][T21933] usb 2-1: USB disconnect, device number 61 13:46:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090201888f6b90"], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13:46:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) unshare(0x20040400) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, 0x0) 13:46:35 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x39ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 13:46:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000008380)=[{&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1}, {&(0x7f0000000240)=@in={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)}], 0x2, 0x0) 13:46:35 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="25af4a5fc240cabccf92c0c60c", 0xd}, {&(0x7f0000000100)="c7772e", 0x3}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xd, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @noop, @ra={0x94, 0x4}]}}}], 0x58}, 0x0) 13:46:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xf0}) 13:46:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) unshare(0x20040400) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, 0x0) 13:46:35 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x39ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) [ 3409.534770][T21933] usb 2-1: new high-speed USB device number 62 using dummy_hcd 13:46:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) unshare(0x20040400) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, 0x0) 13:46:36 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d36389ce0d47243b8a0dc23cc8489e27b243e508fb0f62c8ddccf94c935b2624092f9f9803a02e2e95bc64806224ce61f822e2ea65bafa0c1a8906176378cddbfea70b94968d037536708ed5c369da1939c84d5228fcc666a8d5bcd67d759d01be70bdea34221f0acb9bb95aac2dfbfcfa738b65fe4a1bb2ccfccade64ac4004f47ab2dbbeb27cd6312d1189b0a25de4194002e0c472e1278bec9755aac66c0bf7dea5cc51ad3bad0264572af962812ad16a6ad41c3d96829d1479b291a7670ed53e09182361a17d584aaab36c9700d927ca31d0ccac4a984af2731a220b88b3b4e6cc197fc6218d6e0d3eb4a1eeaa9c5d8f4a96a0ee46f237b3693a09e6be7d04f46617ba82d7b179cbba264abca603bff1a2b37034a741cf14f93b7d7082ff428a4ae1c5c3bb6ce9748b0ac59df77a639e90b372df00cadcaf680111e150c701e0395cef940ad34e2814565ebdb1ff0c9d7e4cd0f2bcbb1e2785f3d7c23e123077869ebe2298e8554e5cdb74745efb3059aa5ca8db8bd047f06b068812cc6a03b0627c08b4efd01fb3e7ea817a771927fd17bfae51adfbdbcb8ffca4c74db4a01e5a9e16d41eabd16230b6245834c8f25e8e7581017c1f9b9b832d2d2e0ba80502bba79921c6b18cd3f4811978a35ee5f0b997bc55e696166b80e6f0ec477d3ab10c20861080f70e15656777d9a6de45f28bddd4b9d4cebcd5b2a66ce65603cc7677433cb1c4bca6cb4081b724be8b8d3ec7b2156128ac829e6adf3e5fcb12a80858c511fa60c6a72c0cf21c2fb4e3afa553d4ff8dab55332eeb611bd2fea79ca6600d4dcace49d50542590a9d96bbe93ad1ce0e62a48a21c0466c4b51b08562956b8b93f52d47c9e0634e3b75eaf155167f82ad21eb76b44f9bf0379a99672acff2aefdd609208cab70cd2b5774c58de59bc73702c1095a26ca4b634f5575c03392ad4cb2c7e46b69a052667ee1877ded71829bdd3ac7808e38ad2cc15af338b049c398a00c48ba55f62f5a282b061b9167baf1b4d392ae56b2592d597c98d897cb774a392b18c427f530894ed160bd3c91d19268380be4a56b102de4e59dbdeabedd8b0f66d7321300ab08ed10286e374a9380d23461d0207ed2291f3393c99657eb13b7de80f72d52d6773e38f3ddd9d925715c92aab81b462efda4e368ca7bbed29a201a1a6371e38d50c66e5c36e63c00fb94bc05fd3f3f4c40c81a9aaf4f518c50e5131e56dbe69029f25470760549dcc03b37fd5cc21ce1bebe752d7ba0f74545698ed4ea4059608d2f14fd06ba83658dfea1e6d0f4ac82af7c1e75a5c6418a5b41d50f326f7c2908144e61123e8063a0096ee50cf15d7815a49012fe048b30a533c58f16dc6aad228abd8a4de30df19e23715338265c7e4226922eb67e0d6f6ee185f245954133d3a572a496f0567ac9f83407e3532399f8d603717f18dba7a5b1130a6e145b8f6962acd8fb4c603fde072e0172b6402dda1495152a29dee3b44684c034c5a1974acd7e1883832e1440fa4df4ec771442c3bebc72a4e9f96035f154a0bf1e83be08a483285a5558928b6feed7ef15184f73a6c93bd2ad2978b2bf5063d03ec1f770fe53a7d9770167ed799296bdc0ba24f0f504fc78cfca5bd62002df2968b5381073a125d2ce74f6d2f1bec103d6a275328cd6b1a466c7d12f5b4877eb134eb61f453707af779550ed00ccf6d078dcc87ab999b1f77eca1458cd5037c66f4099edff95e6287e86395190a979dfb1cca147bcf2e75a3f910ac7a844fefea9f488d5b6ec1f145245457130eadf1910e1a483281b32d7289ea22c90dca07084a58a17da5d805ef19a7684df789498a7c28751c355e588440ff8e0eb50e95768e69b56061ab1a692e4d09887d93216e71fcff0c66556af4ffb794d6c12111ce2a89d90941f79af35ba8cc96efd38462b2fb0a2ee4140121832e3a2f24621ebf0c1203d83ce37731c40aa4be62121844f10ea16a3911d3e3063141ecbf989c40f96326328e8e2d652f43cb768cbbbfa7097b2ddf3db6ca091a10f17ed0b2233e763f23ba1e80c97e167c365eb6145b62b5f8e7f39e0e7570103e536011f22d2b60906bace2910b7405a8b5090cbadf9e250ff57632d10871fc3cca2df6594ba38115ad05cbaf8a2dea41e09698e14f2ab", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209900d08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)='\x00', 0x39ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 13:46:36 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="25af4a5fc240cabccf92c0c60c", 0xd}, {&(0x7f0000000100)="c7772e", 0x3}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xd, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @noop, @ra={0x94, 0x4}]}}}], 0x58}, 0x0) 13:46:36 executing program 5: ioctl$CHAR_RAW_SECTGET(0xffffffffffffffff, 0x1267, 0x0) fanotify_init(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x44) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 3409.922775][T21933] usb 2-1: config index 0 descriptor too short (expected 34817, got 68) [ 3409.931345][T21933] usb 2-1: config 107 has too many interfaces: 143, using maximum allowed: 32 [ 3409.940422][T21933] usb 2-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config [ 3409.950952][T21933] usb 2-1: config 107 has 0 interfaces, different from the descriptor's value: 143 [ 3410.203543][T21933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3410.213018][T21933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.221382][T21933] usb 2-1: Product: syz [ 3410.226162][T21933] usb 2-1: Manufacturer: syz [ 3410.230846][T21933] usb 2-1: SerialNumber: syz [ 3410.678529][T21933] usb 2-1: USB disconnect, device number 62 13:46:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090201888f6b90"], 0x0) ioctl$EVIOCGPHYS(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13:46:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) dup3(r3, r1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) 13:46:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045503, &(0x7f0000000000)) 13:46:37 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="25af4a5fc240cabccf92c0c60c", 0xd}, {&(0x7f0000000100)="c7772e", 0x3}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xd, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @noop, @ra={0x94, 0x4}]}}}], 0x58}, 0x0) 13:46:37 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209900d08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)='\x00', 0x39ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 13:46:37 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xf0}) 13:46:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') 13:46:38 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="25af4a5fc240cabccf92c0c60c", 0xd}, {&(0x7f0000000100)="c7772e", 0x3}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xd, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @noop, @ra={0x94, 0x4}]}}}], 0x58}, 0x0) 13:46:38 executing program 2: io_setup(0x5ff, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000006900)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 13:46:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x5e, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) [ 3412.031856][T11847] usb 2-1: new high-speed USB device number 63 using dummy_hcd 13:46:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') 13:46:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) [ 3412.425098][T11847] usb 2-1: config index 0 descriptor too short (expected 34817, got 68) [ 3412.434041][T11847] usb 2-1: config 107 has too many interfaces: 143, using maximum allowed: 32 [ 3412.443186][T11847] usb 2-1: config 107 has an invalid descriptor of length 0, skipping remainder of the config [ 3412.454116][T11847] usb 2-1: config 107 has 0 interfaces, different from the descriptor's value: 143 [ 3412.672384][T11847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3412.681821][T11847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.689895][T11847] usb 2-1: Product: syz [ 3412.694361][T11847] usb 2-1: Manufacturer: syz [ 3412.699588][T11847] usb 2-1: SerialNumber: syz [ 3413.025566][T11847] usb 2-1: USB disconnect, device number 63 13:46:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 13:46:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 13:46:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x51) 13:46:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') 13:46:40 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @action={@with_ht={{{}, {}, @device_b}}, @addba_resp}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x146}]}, 0x50}}, 0x0) 13:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@delchain={0x24, 0x2a, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0xe}, 0x0) 13:46:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) 13:46:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') 13:46:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) 13:46:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x90, [0x20000680, 0x0, 0x0, 0x200006b0, 0x200006e0], 0x0, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}]}, 0x108) [ 3414.136867][T13544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:46:41 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r3, @ANYBLOB="01080080000000000800f1ff"], 0x24}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:46:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r0) 13:46:41 executing program 2: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) 13:46:41 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) lseek(r3, 0x2, 0x1) 13:46:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{&(0x7f0000000900)={0xa, 0x4e21, 0x0, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@rthdrdstopts={{0x18}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}}], 0x1, 0x0) [ 3414.805899][T13568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3414.989114][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r0) 13:46:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @action={@with_ht={{{}, {}, @device_b}}, @addba_resp}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x146}]}, 0x50}}, 0x0) 13:46:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x50, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r3, @ANYBLOB="01080080000000000800f1ff"], 0x24}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:46:42 executing program 0: futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:46:42 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) socket(0x1a, 0x0, 0x0) 13:46:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r0) [ 3415.771034][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000100001043a0000ffffff0000b2780000", @ANYRES32=r3, @ANYBLOB="00000000001f0ca054001280110001c0d2c11bdb64d39300000076abf3a188023c0005800500190002000000050001"], 0x74}, 0x1, 0x88a8ffff}, 0x0) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x40000000000024a, 0x0) 13:46:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r3, r0) 13:46:42 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r3, @ANYBLOB="01080080000000000800f1ff"], 0x24}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:46:42 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) writev(r0, &(0x7f0000002880)=[{&(0x7f0000001500)='%', 0x7ffffff2}], 0x1) 13:46:43 executing program 0: futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x0) [ 3416.343382][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3416.353867][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 3416.363399][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 3416.370700][T13634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3416.488733][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3416.651568][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3416.661901][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 3416.670963][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 3416.678452][T13634] bridge0: port 1(bridge_slave_0) entered forwarding state 13:46:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:46:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @action={@with_ht={{{}, {}, @device_b}}, @addba_resp}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x146}]}, 0x50}}, 0x0) 13:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0x12f}]) 13:46:43 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r3, @ANYBLOB="01080080000000000800f1ff"], 0x24}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:46:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000025ca7808401c3405ccda010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x0, 0x0, 0x4, "9e980454"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:46:43 executing program 0: futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:46:43 executing program 5: unshare(0x8000400) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000001700), 0x9, 0x0) [ 3417.538978][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:46:44 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x4480, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) read(r0, &(0x7f0000000000), 0x20002000) 13:46:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="24000000200007041dfffd946f610500020000001f00000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3417.732261][T11847] usb 3-1: new high-speed USB device number 23 using dummy_hcd 13:46:44 executing program 0: futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1000000000000085, 0x0, 0x0, &(0x7f0000000000), 0x0) 13:46:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'vlan0\x00', {'nr0\x00'}}) [ 3417.982912][T11847] usb 3-1: Using ep0 maxpacket: 8 13:46:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x1fb, 0x44000102, 0x0) 13:46:44 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000300)="bd38832aa0d96fba3d73fad7cd21", 0xe) recvmmsg(r0, &(0x7f0000001b00), 0x201, 0x2040, 0x0) [ 3418.285730][T11847] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=da.cc [ 3418.295964][T11847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3418.304687][T11847] usb 3-1: Product: syz [ 3418.308937][T11847] usb 3-1: Manufacturer: syz [ 3418.313751][T11847] usb 3-1: SerialNumber: syz [ 3418.401803][T11847] usb 3-1: config 0 descriptor?? [ 3418.458793][T11847] i2c-tiny-usb 3-1:0.0: version da.cc found at bus 003 address 023 13:46:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @action={@with_ht={{{}, {}, @device_b}}, @addba_resp}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x146}]}, 0x50}}, 0x0) 13:46:45 executing program 0: unshare(0x2000400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045007, 0x0) 13:46:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x8f) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@remote, 0x0, r4}) [ 3419.124738][T11847] i2c i2c-0: failure reading functionality [ 3419.137733][T11847] i2c i2c-0: connected i2c-tiny-usb device [ 3419.173461][T11847] usb 3-1: USB disconnect, device number 23 [ 3419.881529][T22714] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3420.121313][T22714] usb 3-1: Using ep0 maxpacket: 8 [ 3420.402501][T22714] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=da.cc [ 3420.411981][T22714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.420024][T22714] usb 3-1: Product: syz [ 3420.424409][T22714] usb 3-1: Manufacturer: syz [ 3420.429381][T22714] usb 3-1: SerialNumber: syz [ 3420.446788][T22714] usb 3-1: config 0 descriptor?? [ 3420.496951][T22714] i2c-tiny-usb 3-1:0.0: version da.cc found at bus 003 address 024 13:46:47 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 13:46:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x1fb, 0x44000102, 0x0) 13:46:47 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000300)="bd38832aa0d96fba3d73fad7cd21", 0xe) recvmmsg(r0, &(0x7f0000001b00), 0x201, 0x2040, 0x0) 13:46:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010058}]}) 13:46:47 executing program 0: socket$netlink(0x10, 0x3, 0x0) iopl(0x1f) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffffd, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x9, 0x9, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_key={0x3, 0x8, 0x60, 0x0, "30f31143f916e451e2cc8b5b"}, @sadb_lifetime={0x4, 0x3, 0x7, 0x9, 0x3, 0x6}]}, 0x48}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="020100021000000000000600000000000800130000ffff400000d2a82be90000e592c30000ffff390000ff0f00000019e00073000000000000000000000035000000000000000000000e02ff00000000030006000000000002000004000000bb0000e00000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02051f05090000022cbd7000fbdbdf2507001900000000000a004e2000000000000000000001000000000000000000010104000002004e20e0000001000000000d00000000000000"], 0x48}}, 0x4000804) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0xb7, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 13:46:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000bc0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000000600)=""/57, 0x39}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/75, 0x4b}], 0x7, &(0x7f0000000840)=""/28, 0x1c}}, {{&(0x7f0000000880)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/235, 0xeb}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/62, 0x3e}], 0x58}}], 0x3, 0x0, 0x0) [ 3420.631430][T22714] (null): failure setting delay to 10us [ 3420.637346][T22714] i2c-tiny-usb: probe of 3-1:0.0 failed with error -5 [ 3420.668960][T22714] usb 3-1: USB disconnect, device number 24 [ 3420.777741][T13742] not chained 160000 origins [ 3420.781060][T13742] CPU: 0 PID: 13742 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 3420.781060][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.781060][T13742] Call Trace: [ 3420.781060][T13742] dump_stack+0x21c/0x280 [ 3420.808113][T13742] kmsan_internal_chain_origin+0x6f/0x130 [ 3420.808113][T13742] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3420.817769][T13742] ? kmsan_get_metadata+0x116/0x180 [ 3420.817769][T13742] ? kmsan_internal_check_memory+0xb1/0x520 [ 3420.829331][T13742] ? kmsan_internal_set_origin+0x85/0xc0 [ 3420.829331][T13742] ? kmsan_get_metadata+0x116/0x180 [ 3420.829331][T13742] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3420.829331][T13742] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3420.829331][T13742] ? kmsan_get_metadata+0x116/0x180 [ 3420.855984][T13742] ? kmsan_internal_set_origin+0x85/0xc0 [ 3420.855984][T13742] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3420.855984][T13742] ? _copy_from_user+0x1fd/0x300 [ 3420.855984][T13742] ? kmsan_get_metadata+0x116/0x180 [ 3420.855984][T13742] __msan_chain_origin+0x57/0xa0 [ 3420.855984][T13742] do_recvmmsg+0x180c/0x22f0 [ 3420.855984][T13742] ? kmsan_internal_check_memory+0x20/0x520 [ 3420.855984][T13742] ? kmsan_internal_set_origin+0x85/0xc0 [ 3420.855984][T13742] ? __msan_poison_alloca+0xe9/0x110 [ 3420.855984][T13742] ? __se_sys_recvmmsg+0xd6/0x410 [ 3420.855984][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3420.855984][T13742] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3420.855984][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3420.855984][T13742] do_syscall_64+0x9f/0x140 [ 3420.931556][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3420.931556][T13742] RIP: 0033:0x45e219 [ 3420.931556][T13742] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3420.961290][T13742] RSP: 002b:00007fdc66f56c68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3420.961290][T13742] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 3420.961290][T13742] RDX: 00000000000001fb RSI: 0000000020008880 RDI: 0000000000000005 [ 3420.961290][T13742] RBP: 000000000119bfd0 R08: 0000000000000000 R09: 0000000000000000 [ 3420.961290][T13742] R10: 0000000044000102 R11: 0000000000000246 R12: 000000000119bf8c [ 3420.961290][T13742] R13: 00000000016afb5f R14: 00007fdc66f579c0 R15: 000000000119bf8c [ 3420.961290][T13742] Uninit was stored to memory at: [ 3420.961290][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3420.961290][T13742] __msan_chain_origin+0x57/0xa0 [ 3420.961290][T13742] do_recvmmsg+0x180c/0x22f0 [ 3420.961290][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3420.961290][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3420.961290][T13742] do_syscall_64+0x9f/0x140 [ 3420.961290][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.051290][T13742] [ 3421.051290][T13742] Uninit was stored to memory at: [ 3421.051290][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3421.051290][T13742] __msan_chain_origin+0x57/0xa0 [ 3421.051290][T13742] do_recvmmsg+0x180c/0x22f0 [ 3421.051290][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3421.051290][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3421.081249][T13742] do_syscall_64+0x9f/0x140 [ 3421.081249][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.081249][T13742] [ 3421.081249][T13742] Uninit was stored to memory at: [ 3421.081249][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3421.081249][T13742] __msan_chain_origin+0x57/0xa0 [ 3421.081249][T13742] do_recvmmsg+0x180c/0x22f0 [ 3421.081249][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3421.081249][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3421.081249][T13742] do_syscall_64+0x9f/0x140 [ 3421.081249][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.081249][T13742] [ 3421.081249][T13742] Uninit was stored to memory at: [ 3421.081249][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3421.081249][T13742] __msan_chain_origin+0x57/0xa0 [ 3421.081249][T13742] do_recvmmsg+0x180c/0x22f0 [ 3421.081249][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3421.081249][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3421.081249][T13742] do_syscall_64+0x9f/0x140 [ 3421.081249][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.081249][T13742] [ 3421.081249][T13742] Uninit was stored to memory at: [ 3421.081249][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3421.081249][T13742] __msan_chain_origin+0x57/0xa0 [ 3421.081249][T13742] do_recvmmsg+0x180c/0x22f0 [ 3421.081249][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3421.081249][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3421.081249][T13742] do_syscall_64+0x9f/0x140 [ 3421.081249][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.081249][T13742] [ 3421.081249][T13742] Uninit was stored to memory at: [ 3421.081249][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3421.081249][T13742] __msan_chain_origin+0x57/0xa0 [ 3421.081249][T13742] do_recvmmsg+0x180c/0x22f0 [ 3421.081249][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3421.081249][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3421.081249][T13742] do_syscall_64+0x9f/0x140 [ 3421.081249][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.081249][T13742] [ 3421.081249][T13742] Uninit was stored to memory at: [ 3421.081249][T13742] kmsan_internal_chain_origin+0xad/0x130 [ 3421.081249][T13742] __msan_chain_origin+0x57/0xa0 [ 3421.081249][T13742] do_recvmmsg+0x180c/0x22f0 [ 3421.081249][T13742] __se_sys_recvmmsg+0x24a/0x410 [ 3421.081249][T13742] __x64_sys_recvmmsg+0x62/0x80 [ 3421.081249][T13742] do_syscall_64+0x9f/0x140 [ 3421.081249][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3421.081249][T13742] [ 3421.081249][T13742] Local variable ----msg_sys@do_recvmmsg created at: [ 3421.081249][T13742] do_recvmmsg+0xbf/0x22f0 [ 3421.081249][T13742] do_recvmmsg+0xbf/0x22f0 13:46:48 executing program 2: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x4cd00) 13:46:48 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000300)="bd38832aa0d96fba3d73fad7cd21", 0xe) recvmmsg(r0, &(0x7f0000001b00), 0x201, 0x2040, 0x0) 13:46:48 executing program 5: r0 = socket$nl_generic(0x2, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x3c}}, 0x801) 13:46:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x1fb, 0x44000102, 0x0) 13:46:48 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000300)="bd38832aa0d96fba3d73fad7cd21", 0xe) recvmmsg(r0, &(0x7f0000001b00), 0x201, 0x2040, 0x0) 13:46:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x80047456, &(0x7f0000000140)) 13:46:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xcc4f0100, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0x4, r5}]}, 0x44}}, 0x0) 13:46:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x1fb, 0x44000102, 0x0) [ 3422.635737][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:46:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x11}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x24}}, 0x0) [ 3422.756145][T13772] 8021q: adding VLAN 0 to HW filter on device bond6 13:46:49 executing program 2: clone(0x2000380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socketpair(0x22, 0x2, 0x10, &(0x7f0000000000)) [ 3422.909340][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3423.131774][T13814] delete_channel: no stack [ 3423.136440][T13814] delete_channel: no stack [ 3423.172057][T13818] delete_channel: no stack [ 3423.176851][T13818] delete_channel: no stack 13:46:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000a000000f7ff0000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 13:46:50 executing program 3: r0 = semget(0x1, 0x0, 0x0) semctl$GETVAL(r0, 0x0, 0x5, 0x0) 13:46:50 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) clone3(&(0x7f0000000200)={0x2c9024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000000c0)=""/215, 0x0, 0x0, {r0}}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:46:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @random="4c4cd2391180"}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @remote, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "81b475a8882eb7eb"}}}}, 0x0) 13:46:50 executing program 4: unshare(0x24020400) r0 = memfd_create(&(0x7f0000000240)='sysr\x01\xdf;HX%\x8f\xdd\xff\xff\xffam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f{\x85\x19\xe4\xf6n{B\x88\xd6\xacQ\xa9\a\xc9J\x1b\xefT\x9b\xd3\x8e\xe6YX\xb7<@\xdd\xab\x8c\xe5\x82o\xd1lyk\x11\x11\xa4\xff\x92\x04\x15R!\xa0\x17g\xb1\x91\xb6/\x8a\xb18\xa0\xbe\'\xa8$\x03\x9d\x93\xf9\x1a\\\xe2\xa1,\xbe\x01\x8a\xfe4\xa7\xc8\x9eP\xc2\x01\x10\"\x00\x00\xc8\xc7\xden\xab\xdb*\xa6(^\t\xd5\xf0\xfe\xc2l\xb1\x8c\xa6\xccu\x18\xd3SW\xa2]y!\xd7\xcb\xdd\x14\x06\x00\x7f\x00', 0x0) fdatasync(r0) 13:46:50 executing program 2: io_setup(0x2, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f00000000c0)="901982e17e0872", 0x7}]) 13:46:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x19}, {0x8, 0x16}, {0x8}]}}]}]}, 0x44}}, 0x0) [ 3423.685731][T13832] IPVS: ftp: loaded support on port[0] = 21 13:46:50 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) read(r0, &(0x7f0000000100)=""/224, 0xe0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x4) 13:46:50 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x181002, 0x0) write$proc_mixer(r0, 0x0, 0xb6) write$proc_mixer(r0, 0x0, 0x0) 13:46:50 executing program 4: unshare(0x24020400) r0 = memfd_create(&(0x7f0000000240)='sysr\x01\xdf;HX%\x8f\xdd\xff\xff\xffam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f{\x85\x19\xe4\xf6n{B\x88\xd6\xacQ\xa9\a\xc9J\x1b\xefT\x9b\xd3\x8e\xe6YX\xb7<@\xdd\xab\x8c\xe5\x82o\xd1lyk\x11\x11\xa4\xff\x92\x04\x15R!\xa0\x17g\xb1\x91\xb6/\x8a\xb18\xa0\xbe\'\xa8$\x03\x9d\x93\xf9\x1a\\\xe2\xa1,\xbe\x01\x8a\xfe4\xa7\xc8\x9eP\xc2\x01\x10\"\x00\x00\xc8\xc7\xden\xab\xdb*\xa6(^\t\xd5\xf0\xfe\xc2l\xb1\x8c\xa6\xccu\x18\xd3SW\xa2]y!\xd7\xcb\xdd\x14\x06\x00\x7f\x00', 0x0) fdatasync(r0) [ 3424.097309][T13861] ALSA: mixer_oss: invalid OSS volume '' [ 3424.134568][T13861] ALSA: mixer_oss: invalid OSS volume '' 13:46:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:46:51 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001880)={&(0x7f0000001780)=@name, 0x10, 0x0}, 0x20000045) 13:46:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x7, 0x0, "b5aa441de3ceb96d1f91be0818ec4dbf45f1bb941b27be3b90a0aab54a45d9c9"}) [ 3424.480593][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 3424.480664][ T32] audit: type=1804 audit(1610891211.092:166): pid=13870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/2983/file0/bus" dev="ramfs" ino=187492 res=1 errno=0 [ 3424.603329][ T32] audit: type=1804 audit(1610891211.202:167): pid=13871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/2983/file0/bus" dev="ramfs" ino=187492 res=1 errno=0 [ 3424.624813][ T32] audit: type=1804 audit(1610891211.222:168): pid=13872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/2983/file0/file0/bus" dev="ramfs" ino=186494 res=1 errno=0 [ 3424.789867][ T32] audit: type=1804 audit(1610891211.282:169): pid=13872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/2983/file0/file0/bus" dev="ramfs" ino=186494 res=1 errno=0 13:46:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x31d, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 13:46:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0x3ff, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000052010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000002800020000000000040000000000000000010000ffffffff000000000c000400feffffff"], 0x58}}, 0x0) bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f00000003c0)="0503460008003e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697fba121f7b398097871259252d1e457882cc", 0x5d, 0x0, 0x0, 0x0) 13:46:51 executing program 4: unshare(0x24020400) r0 = memfd_create(&(0x7f0000000240)='sysr\x01\xdf;HX%\x8f\xdd\xff\xff\xffam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f{\x85\x19\xe4\xf6n{B\x88\xd6\xacQ\xa9\a\xc9J\x1b\xefT\x9b\xd3\x8e\xe6YX\xb7<@\xdd\xab\x8c\xe5\x82o\xd1lyk\x11\x11\xa4\xff\x92\x04\x15R!\xa0\x17g\xb1\x91\xb6/\x8a\xb18\xa0\xbe\'\xa8$\x03\x9d\x93\xf9\x1a\\\xe2\xa1,\xbe\x01\x8a\xfe4\xa7\xc8\x9eP\xc2\x01\x10\"\x00\x00\xc8\xc7\xden\xab\xdb*\xa6(^\t\xd5\xf0\xfe\xc2l\xb1\x8c\xa6\xccu\x18\xd3SW\xa2]y!\xd7\xcb\xdd\x14\x06\x00\x7f\x00', 0x0) fdatasync(r0) 13:46:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:46:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 13:46:51 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20401, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f0000000140)="fd", 0x1) [ 3425.180260][ T32] audit: type=1804 audit(1610891211.792:170): pid=13888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/2984/file0/bus" dev="ramfs" ino=187522 res=1 errno=0 [ 3425.205315][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3425.327661][ T32] audit: type=1804 audit(1610891211.892:171): pid=13896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/2984/file0/bus" dev="ramfs" ino=187522 res=1 errno=0 [ 3425.365553][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:46:52 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000000c0)=0x52b) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/35) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x21a0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000012c0)={0x3, &(0x7f00000001c0)="a8938f"}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x86564e1b610bdc7f, 0x0) 13:46:52 executing program 4: unshare(0x24020400) r0 = memfd_create(&(0x7f0000000240)='sysr\x01\xdf;HX%\x8f\xdd\xff\xff\xffam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f{\x85\x19\xe4\xf6n{B\x88\xd6\xacQ\xa9\a\xc9J\x1b\xefT\x9b\xd3\x8e\xe6YX\xb7<@\xdd\xab\x8c\xe5\x82o\xd1lyk\x11\x11\xa4\xff\x92\x04\x15R!\xa0\x17g\xb1\x91\xb6/\x8a\xb18\xa0\xbe\'\xa8$\x03\x9d\x93\xf9\x1a\\\xe2\xa1,\xbe\x01\x8a\xfe4\xa7\xc8\x9eP\xc2\x01\x10\"\x00\x00\xc8\xc7\xden\xab\xdb*\xa6(^\t\xd5\xf0\xfe\xc2l\xb1\x8c\xa6\xccu\x18\xd3SW\xa2]y!\xd7\xcb\xdd\x14\x06\x00\x7f\x00', 0x0) fdatasync(r0) 13:46:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xee}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:46:52 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0xe) [ 3425.960877][T13908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3426.009165][T13908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3426.019366][T13908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:46:53 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 13:46:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f0000000080)={0x0, 0x0, [0x277, 0x0, 0x3, 0x2, 0xda0]}) dup2(r3, r2) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 3426.623921][T13919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3426.665017][T13919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3426.675089][T13919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:46:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xd, 0x4}]}}}]}, 0x3c}}, 0x0) 13:46:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:46:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000002060101000000000000000000000000050005010000000005000400000000000900020073797a30000000000500010006000000100003"], 0x48}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe0, 0x0) 13:46:54 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000000c0)=0x52b) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/35) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x21a0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000012c0)={0x3, &(0x7f00000001c0)="a8938f"}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x86564e1b610bdc7f, 0x0) 13:46:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x1c) 13:46:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_NAT_SRC={0xc, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x2, @empty=0xb8010000}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}}, 0x0) 13:46:54 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffffffff7) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) connect$vsock_stream(r0, 0x0, 0x0) [ 3427.629956][T13942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3427.669944][T13942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3427.680113][T13942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3427.865568][ T32] audit: type=1804 audit(1610891214.482:172): pid=13944 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/2985/file0/bus" dev="ramfs" ino=187566 res=1 errno=0 [ 3428.064045][ T32] audit: type=1804 audit(1610891214.672:173): pid=13948 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/2985/file0/bus" dev="ramfs" ino=187566 res=1 errno=0 13:46:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x3c}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:46:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="663c7b474b897094e71b0fb1f138a925d86800278dcff47d010b0067dd32378f364600000000000000f20aa20f920139d34715b9f50100771d1d1511319e7825921c5547", 0x44}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x7) 13:46:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:46:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0xcc, 0x9}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000300)="1c", 0x0}, 0x20) 13:46:55 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)=""/208, 0xd0}], 0x2) [ 3428.715196][ T32] audit: type=1804 audit(1610891215.332:174): pid=13966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/2986/file0/bus" dev="ramfs" ino=187589 res=1 errno=0 [ 3428.834127][ T32] audit: type=1804 audit(1610891215.452:175): pid=13968 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/2986/file0/bus" dev="ramfs" ino=187589 res=1 errno=0 [ 3428.983196][T13971] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 3428.992176][T13971] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4) 13:46:55 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 13:46:55 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000000c0)=0x52b) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/35) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x21a0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000012c0)={0x3, &(0x7f00000001c0)="a8938f"}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x86564e1b610bdc7f, 0x0) 13:46:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 13:46:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0xffff, 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{0x0, 0x10003}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff9, 0x3}}]}}}]}, 0x58}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="480a838543a9914b8c53fd111e5d", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 3429.128196][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3429.194215][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3429.317407][T13983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3429.365291][T13983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3429.376879][T13983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:46:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x6, 0x84, 0x7c, 0x8, 0xdf6, 0x21, 0x1971, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x56, 0x13}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x44, &(0x7f00000009c0)={0x0, 0x0, 0x2, "d0d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x2, "c8cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 13:46:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) 13:46:56 executing program 0: unshare(0x2040400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040)=0xffff8477, 0x4) 13:46:56 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000000c0)=0x52b) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/35) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x21a0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/udmabuf\x00', 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000012c0)={0x3, &(0x7f00000001c0)="a8938f"}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x86564e1b610bdc7f, 0x0) [ 3430.472169][T14002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3430.529081][T14002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3430.539197][T14002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:46:58 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 13:46:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0xd0, 0x1f8, 0x0, 0xd0, 0xd0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '% '}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r3 = syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x9, 0x200) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 13:46:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x397}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:46:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf, 0x1, 'bond_slave\x00'}, {0x9, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6}}}}]}, 0x40}}, 0x0) 13:46:58 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001}) close(r0) [ 3431.557486][T14008] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:58 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_virt_wifi\x00', &(0x7f0000000200)=@ethtool_ringparam}) [ 3431.630870][T14013] ip6t_REJECT: ECHOREPLY is not supported 13:46:58 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}) clone(0x20085100, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 13:46:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x397}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 3432.061414][T14008] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 13:46:59 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) dup3(r1, r2, 0x0) 13:46:59 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{0x0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fstatfs(0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 13:46:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x20020400) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) 13:46:59 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000180)) 13:46:59 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}) clone(0x20085100, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 13:46:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x397}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:47:00 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}) clone(0x20085100, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 13:47:00 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) 13:47:00 executing program 0: unshare(0x2a040600) r0 = socket(0x15, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x114, 0x5, 0x0, 0x4) 13:47:00 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{0x0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fstatfs(0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 3433.794555][ T32] audit: type=1326 audit(1610891220.411:176): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14051 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 13:47:00 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}) clone(0x20085100, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 13:47:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x397}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13:47:00 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0x80000000fb, 0x0, 0x400000006, 0x0, 0x400000000000000]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffdb8, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:47:00 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{0x0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fstatfs(0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 3434.195554][T14068] user requested TSC rate below hardware speed [ 3434.589395][ T32] audit: type=1326 audit(1610891221.201:177): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14051 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 3434.599472][T14081] user requested TSC rate below hardware speed [ 3434.890967][ T32] audit: type=1326 audit(1610891221.501:178): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14090 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x45e219 code=0x0 [ 3434.920123][ T32] audit: type=1326 audit(1610891221.531:179): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14065 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 13:47:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x184}}, 0x0) 13:47:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x4c6127d0eede289c}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) 13:47:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2}, &(0x7f0000000100)=0xc) 13:47:01 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{0x0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fstatfs(0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 13:47:01 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x8, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 13:47:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="00df251300bc7121f2c3"], 0x4c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3434.941424][ T32] audit: type=1326 audit(1610891221.531:180): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14065 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 3435.133671][T14102] user requested TSC rate below hardware speed 13:47:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r1}) exit(0x0) close(r0) [ 3435.322458][T14102] user requested TSC rate below hardware speed 13:47:02 executing program 5: clock_gettime(0xa4b1e1f2f257c103, 0x0) 13:47:02 executing program 0: semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 13:47:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="2e000000120081ff0f000014000100ee070000000000000001000000000000000000006673810f0b8cb52ae4a749", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 3435.832020][T14129] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 13:47:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x0, 0x9, 0x5}, 0x14}}, 0x0) 13:47:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x38, "007cfd087551272f19c1f957854290f58c37d0989a1f808151fc78f26fc43c2025912b825e08cc87c45afdc7342cb80eed04dc9a202d39e0"}, &(0x7f0000000240)=0x40) [ 3435.918338][T14130] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 13:47:02 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='#\x8d\x00\x00\x00\x00\x00\x00\x00', 0x0) splice(r0, 0x0, r2, 0x0, 0x400000000003, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x16) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) 13:47:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0xc8) sendmmsg$inet6(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)="e600f72c19aafa921fe3fe90ffe185243ce86514d441da0c351c8ee0bd7af4faa0c6b2133184518dde5a54692eef021d794a36a48a2a0e0675a4bf32b291d896af5628e7408ddde6a24ebb03afb7ac883398971ac2d09a370a88b180e3920a248bdb8e1dd13f46d01ff0f40d308a323ac4a7335193e78ad03b542bec3bcab83a70f8f6dfac8f93b1ed273060ae1f91e4cbfc217ddaec9820b8ea6c738f45ae78f26a8dc874beb8d28e91167aaa3047a88c17220e58c3d38dd2f7b50012b56abc6c2395c8406d70f6f8a94412d591f5", 0xcf}, {&(0x7f0000000300)="9155168b342a23044cf29e9d0509a148d72ad85b2e4a8be0c3f2f114dae6dc4ecec4052d6744c5975e7568443652eb0425110b6193d5fe1762b9a6162b1f22de05216ff51ee5e3523a045b6eacbd1dac22a934aacae5851dbe937101ac8e120cd422dd3fb3338229fcc370a1a69eae7d2e6c457dd60660b8e851801ecf1f2756838b1b32553bf6437ee369cf91a2976d66fefbd044910882967a40e0c4e85714b9ef7e0846b855e46d7a82f8cff9c5", 0xaf}, {&(0x7f0000000100)="50de37", 0x3}, {&(0x7f00000003c0)="f80f6cdbafa291500c630f6309e550afc3a8243436bb3b8fdda1", 0x1a}, {&(0x7f0000000540)="d48cf467ab61778cac57e829d68a63d0c4efe018993dbfb1c41012ca3c17165ca94c0a20b688e77973c1844dc22455aa00a464b70a59ba983b3735c8c292937cc4cc198e725d10eb955f3829c7f84b6b54a3af6e69701d12ed21f026bd0f2be9e737d6eceb4ff731fc00a95657392e3dba610904e931c54ed9011362e12dd549414b4cdfb2ffb549799b68dd061304f257da83386f606d212f000bf94ec748b6e0b524e526725313c5818a843ddaff2168ba619ddc2c10eeb5201e829d3616c5741ff5d47ec4eff4cd8bfd813b40d6dc7aae976254f434da65ae0928eb74cf952513aa4e9b6a85154944", 0xea}, {&(0x7f0000000400)="2e5ee5ac22c14d", 0x7}, {&(0x7f0000000440)="715ef9ba384df1ec4aac340cb37360d1bc6a53d3a9a071d5adf55c3e744b3d6b9c1787e605fa16d133f0b5e4ed48236ff9766b43635d24a1e697fe77f65b814022ea6cb8", 0x44}, {&(0x7f0000000640)="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", 0xd30}], 0x8}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 13:47:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2}, &(0x7f0000000100)=0xc) 13:47:02 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0xb0}}, 0x0) 13:47:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 13:47:03 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x110}], 0x10}}], 0x2, 0x0) 13:47:03 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:03 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0xea, 0xb3, 0x10, 0xa5c, 0x2033, 0xaa75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x76, 0x0, 0x0, 0x17, 0xd7, 0xd0}}]}}]}}, 0x0) 13:47:03 executing program 2: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = dup(r0) r2 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000002140)) 13:47:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r3}}, 0x18) 13:47:03 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) [ 3437.391832][T11847] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 3437.641611][T11847] usb 2-1: Using ep0 maxpacket: 16 [ 3437.762274][T11847] usb 2-1: config 0 has an invalid interface number: 118 but max is 0 [ 3437.770757][T11847] usb 2-1: config 0 has no interface number 0 [ 3437.972357][T11847] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=aa.75 [ 3437.981548][T11847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.989595][T11847] usb 2-1: Product: syz [ 3437.994022][T11847] usb 2-1: Manufacturer: syz [ 3437.998705][T11847] usb 2-1: SerialNumber: syz [ 3438.007859][T11847] usb 2-1: config 0 descriptor?? [ 3438.263392][T11847] usb 2-1: USB disconnect, device number 64 [ 3439.021387][T11847] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3439.261288][T11847] usb 2-1: Using ep0 maxpacket: 16 [ 3439.392126][T11847] usb 2-1: config 0 has an invalid interface number: 118 but max is 0 [ 3439.400406][T11847] usb 2-1: config 0 has no interface number 0 [ 3439.582047][T11847] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=aa.75 [ 3439.592079][T11847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3439.600191][T11847] usb 2-1: Product: syz [ 3439.604714][T11847] usb 2-1: Manufacturer: syz [ 3439.609384][T11847] usb 2-1: SerialNumber: syz [ 3439.651230][T11847] usb 2-1: config 0 descriptor?? [ 3439.901841][T22714] usb 2-1: USB disconnect, device number 65 13:47:07 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 13:47:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2}, &(0x7f0000000100)=0xc) 13:47:07 executing program 0: unshare(0x8040480) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 13:47:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000600000000800dfdffff"], 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:47:07 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) 13:47:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d398500c40) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0xb1c661d318500c51) fcntl$setownex(r1, 0xf, &(0x7f0000000080)) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r2, 0x402, 0xb1c661d318500c51) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) getdents64(r2, &(0x7f0000000080)=""/4082, 0xff2) 13:47:07 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c8b872d2b010000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000080400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 13:47:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000a40)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x32, 0x0, 0x35, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 13:47:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000600000000800dfdffff"], 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:47:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) [ 3440.962906][T14232] IPVS: ftp: loaded support on port[0] = 21 13:47:07 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x401, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) [ 3441.189534][T14259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3441.324042][T14266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:47:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000600000000800dfdffff"], 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13:47:08 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 13:47:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2}, &(0x7f0000000100)=0xc) 13:47:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 13:47:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x2, 0x6, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r0, 0x0) 13:47:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000600000000800dfdffff"], 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 3441.959437][T14232] device vxlan0 entered promiscuous mode [ 3442.059695][T14232] IPVS: ftp: loaded support on port[0] = 21 [ 3442.096554][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:47:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') preadv(r0, &(0x7f00000017c0), 0x334, 0x0, 0x0) 13:47:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ebe6f75d7a90ad868c88e1ab3c8567d7ce1ecb61e8f665cce545759464dd0735545b2e3f073d296b", 0x28, 0x4000000, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x659d639073c8826b}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 13:47:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 13:47:10 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x2, 0x3}, 0x10) 13:47:10 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c8b872d2b010000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000080400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 13:47:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x80000000, &(0x7f00000000c0)) [ 3443.670193][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:47:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0xc0, 0x0, 0xffffffff}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clone(0x0, &(0x7f0000000080)="93e2711eb85a9492fdd8ae92060c982197e66726c1c6ce0cd062d604885a396e0b2afdaa93ab341ed01d", 0x0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) [ 3443.855269][T14348] IPVS: ftp: loaded support on port[0] = 21 13:47:10 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 13:47:10 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x2, 0x3}, 0x10) 13:47:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0xfffffffffffffcad, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:47:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 13:47:10 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x959, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x47425247}}) [ 3444.501715][T14383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:47:11 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 13:47:11 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x2, 0x3}, 0x10) 13:47:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:47:11 executing program 5: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) [ 3445.525028][T14348] device vxlan0 entered promiscuous mode 13:47:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c8b872d2b010000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000080400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 13:47:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0xa, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x50}}, 0x0) 13:47:12 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x2, 0x3}, 0x10) [ 3445.986275][T14424] IPVS: ftp: loaded support on port[0] = 21 [ 3446.162854][T14424] device vxlan0 entered promiscuous mode 13:47:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 13:47:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)={0x0, 0xe, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1dcf5dfe"}, 0x0, 0x0, @fd}) 13:47:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:47:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "7ae99204741aa681af424b359446c58bb73aa8b8b4359d3c18060cf22ec0600f8e493d05e9977b9d248553932544d3553731e937752139bf4d9965bd889563068676f22fbe2fe6384f2d97f86be7c042d4800065c92c3b4b63e0cb32612a2c902e3c944d04012ac3243bad4d761aaffafba38ce6587de584f8b1ab2e00580199440d9608dc9d3a05ccd523ba11cdc349a2b374045baa683e44238091cb1f73a7219c3d6a88f0b47e70feffa12ea926a9ee4a1dab850bda81fc05edcff2d018849874eb2a4cdacbfd1bec19759b10983dd8edfadc6ebfbff733b29512d5c117bd7dfd5944db9116d9d361fed89f78dbe608e47f530494e233165bfeb8de5485c3"}]}}]}, 0x138}}, 0x0) 13:47:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e71b0fb1f147a825d86800278dcff47d56e31f7601000067dd32378f364602812c66538d750f6e060000003f0500bb9fb045f2d1eaa302ab6c2fef", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:47:13 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vcs\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vcs\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f00000000c0)={r1, r0, 0x81}) 13:47:13 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x300) 13:47:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:47:13 executing program 5: pipe(&(0x7f0000000040)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="020100021000000000000600000000000800130000ffff400000d2a82be90000e592c300fcffff390000ff0f00000000e00073000000000000000000000035000000000000000000000e02ff00000000030006000000000002000004000000bb0000e00000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 13:47:14 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c8b872d2b010000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000080400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 13:47:14 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f00000000c0)=""/4071, &(0x7f0000000040)=0xfe7) 13:47:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 3447.730723][T14484] IPVS: ftp: loaded support on port[0] = 21 13:47:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 13:47:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 13:47:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007c4a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2fc0}}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0) 13:47:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000500000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400000037a56e"], 0x0, 0x0, 0x0, 0x0}) [ 3449.099427][T14519] "syz-executor.1" (14519) uses obsolete ecb(arc4) skcipher [ 3449.109909][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3449.179642][T14519] "syz-executor.1" (14519) uses obsolete ecb(arc4) skcipher [ 3449.278794][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3449.297397][T10816] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3449.551234][T10816] usb 3-1: Using ep0 maxpacket: 16 13:47:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e71b0fb1f147a825d86800278dcff47d56e31f7601000067dd32378f364602812c66538d750f6e060000003f0500bb9fb045f2d1eaa302ab6c2fef", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:47:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000680)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='statm\x00') preadv(r0, &(0x7f0000000500), 0x2db, 0x0, 0x0) 13:47:16 executing program 5: timer_gettime(0x0, 0x0) shmget$private(0x0, 0x3000, 0x1a0cb4161cf429af, &(0x7f0000ffd000/0x3000)=nil) pipe(&(0x7f0000002b40)) 13:47:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 13:47:16 executing program 4: r0 = memfd_create(&(0x7f0000000480)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\xed\x8c\xe0Y\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xfa\xbf\xf3x\x86\xc2\xa3\t\x008\xb6XA]\xdc\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,R\x96X\x1ae\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \xa4\x9f\x1a\xca\xb4R\xfc\xf8\xdd\x84u\x17\x15c\x96\xdc2p\xd3Ys&\xb2\xad\x7f\x1dNO\xa8\xe4\xa2\xc6`\t\xb4\xa9=7U6@\n%aS\r\xbc&\x9c\x86\x9d;\xba\xb6\xbd;\xa1_5\xd8\xbb\x98\xa1\xd8\x80\xcb\xff\x18\xc5\xc3~\x7f\x8e/\x12|\xa1n\b#u\xf5\r\x8d\xc6\xc9\xc6\x15\x04\xc66\xfa\x00\x85\x04cP\xcf\vo\xfc\x19V\x8f\xe7H\xc0\x9c2!\xbe\xdb\x89\x92\"\x04\xe2>0\xaf\xe8M\x83\xaf\xa5\xc9\xda\xba)\xba.\xbd\x9e\x02\x9a&\xd6\xe1}\t\xa5/\xa8\x04\xf5f\xa7C\xc5\x1f/\x822;\x93\xcf\xc51\xdcY\x81\vhPoiK\xa4\xeeAq\xde\xdeZC\xb8\xfb\xd9y\xb4(\xdb3\t\x00\v\x91\n\xd3\xf2NJ6\xbfi\x8cp\xa2<\xc8\xd9g\xa3\x8dM\xe4\xda\xef\xb6c\x98h$\xdc\x06dS\xbc\x1fQ6', 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0xd011, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 3449.670625][T14533] "syz-executor.1" (14533) uses obsolete ecb(arc4) skcipher [ 3449.682947][T10816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3449.696273][T10816] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 3449.705575][T10816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3449.865842][T10816] usb 3-1: config 0 descriptor?? 13:47:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x2287, 0x7fffffffefff) [ 3449.940849][T10816] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 13:47:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) 13:47:16 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') recvmmsg(r3, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="c18b5e3e1411f005446f1f"], 0x14}}, 0x0) [ 3450.152247][T10816] usb 3-1: USB disconnect, device number 25 13:47:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb, 0x882) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) [ 3450.400055][T14558] "syz-executor.1" (14558) uses obsolete ecb(arc4) skcipher 13:47:17 executing program 4: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) [ 3450.616251][T14560] usb usb1: usbfs: process 14560 (syz-executor.5) did not claim interface 0 before use 13:47:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) [ 3450.741933][T10816] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3450.850448][T14565] "syz-executor.1" (14565) uses obsolete ecb(arc4) skcipher [ 3450.999048][T10816] usb 3-1: Using ep0 maxpacket: 32 [ 3451.133585][T10816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3451.144757][T10816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3451.154980][T10816] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 3451.164294][T10816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3451.181228][T10816] usb 3-1: config 0 descriptor?? [ 3451.230453][T10816] hub 3-1:0.0: USB hub found [ 3451.441978][T10816] hub 3-1:0.0: 1 port detected [ 3452.121578][T10816] hub 3-1:0.0: activate --> -90 [ 3452.543014][T22714] usb 3-1: USB disconnect, device number 26 [ 3453.421404][T22714] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3453.681321][T22714] usb 3-1: Using ep0 maxpacket: 16 [ 3453.821626][T22714] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3453.835500][T22714] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 3453.845048][T22714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3453.879186][T22714] usb 3-1: config 0 descriptor?? [ 3453.938959][T22714] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 13:47:20 executing program 2: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 13:47:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}}, 0x0) 13:47:20 executing program 5: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000800)=@hopopts={0x0, 0x3, [], [@jumbo, @hao={0xc9, 0x10, @mcast1}]}, 0x20) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) r2 = dup(r1) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 13:47:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000680)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='statm\x00') preadv(r0, &(0x7f0000000500), 0x2db, 0x0, 0x0) 13:47:20 executing program 4: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 13:47:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e71b0fb1f147a825d86800278dcff47d56e31f7601000067dd32378f364602812c66538d750f6e060000003f0500bb9fb045f2d1eaa302ab6c2fef", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 3454.024634][ T1248] usb 3-1: USB disconnect, device number 27 13:47:21 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) [ 3455.131499][ T54] usb 2-1: new high-speed USB device number 66 using dummy_hcd 13:47:21 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2={0xff, 0x5}}}) 13:47:22 executing program 2: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) [ 3455.381724][ T54] usb 2-1: Using ep0 maxpacket: 8 13:47:22 executing program 4: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) [ 3455.514731][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3455.525227][ T54] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3455.536716][ T54] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3455.549884][ T54] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3455.743047][ T54] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3455.752436][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.760612][ T54] usb 2-1: Product: syz [ 3455.765054][ T54] usb 2-1: Manufacturer: syz [ 3455.769778][ T54] usb 2-1: SerialNumber: syz 13:47:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in, 0x0, 0x3, 0x0, 0x0, 0x2}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in=@dev}}, 0xe4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 13:47:22 executing program 4: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) [ 3456.300472][T10816] usb 2-1: USB disconnect, device number 66 13:47:23 executing program 2: socket(0xa, 0x1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x4) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket(0xf, 0x6, 0xca) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x2, 0x2, 0x3, 0x7, 0x8, 0x9}, 0x20) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 13:47:23 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x2c, &(0x7f0000000180)="005b9bbbb21a8c179e847f240e59e1f7f33fa3d5c2549c2cada9e3e541f05ee4ae7b6cd22dd04945e0fb8ad2") [ 3457.087405][T10816] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 3457.342667][T10816] usb 2-1: Using ep0 maxpacket: 8 13:47:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)="66530700ae897094e71b0fb1f147a825d86800278dcff47d56e31f7601000067dd32378f364602812c66538d750f6e060000003f0500bb9fb045f2d1eaa302ab6c2fef", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 3457.462941][T10816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3457.473286][T10816] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3457.484759][T10816] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3457.498029][T10816] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3457.992118][T10816] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3458.001662][T10816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.009747][T10816] usb 2-1: Product: syz [ 3458.014171][T10816] usb 2-1: Manufacturer: syz [ 3458.070412][T10816] usb 2-1: can't set config #1, error -71 [ 3458.097284][T10816] usb 2-1: USB disconnect, device number 67 13:47:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000680)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='statm\x00') preadv(r0, &(0x7f0000000500), 0x2db, 0x0, 0x0) 13:47:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x10) 13:47:24 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 13:47:24 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="b00200002e001b0828bd09b78100df2500000000", @ANYRES32, @ANYBLOB="0a001f0010000800f2ad53"], 0x2b0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 3458.335824][T14708] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3458.442666][T14715] netlink: 652 bytes leftover after parsing attributes in process `syz-executor.2'. 13:47:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 13:47:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 3458.694461][T10816] usb 2-1: new high-speed USB device number 68 using dummy_hcd 13:47:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x403, {0x0, {0x0, 0x1000}, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x42c8, 0x0, 0x0, 0x1}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x2}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x1, 0x0, 0x6}}, 0x14) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r2, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) get_robust_list(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00') [ 3458.752133][T14720] IPVS: ftp: loaded support on port[0] = 21 [ 3458.887386][T14734] IPVS: ftp: loaded support on port[0] = 21 13:47:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x2, @output}) [ 3459.008867][T10816] usb 2-1: Using ep0 maxpacket: 8 [ 3459.151754][T10816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3459.162261][T10816] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3459.173690][T10816] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3459.187147][T10816] usb 2-1: config 1 interface 0 has no altsetting 0 13:47:26 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000034fa1d0809122323e9e2010203010902120001000002000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40113e0000002ff72301", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) [ 3459.426528][T10816] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3459.435796][T10816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3459.444319][T10816] usb 2-1: Product: syz [ 3459.453706][T10816] usb 2-1: Manufacturer: syz [ 3459.459792][T10816] usb 2-1: SerialNumber: syz [ 3459.925351][ T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd 13:47:26 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f00000039c0)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) [ 3460.132131][T10816] usb 2-1: USB disconnect, device number 68 [ 3460.201571][ T54] usb 5-1: Using ep0 maxpacket: 8 13:47:27 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f0000000100)={0x0, 0x0, 0x1}) [ 3460.556267][ T54] usb 5-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 3460.565752][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.574100][ T54] usb 5-1: Product: syz [ 3460.581286][ T54] usb 5-1: Manufacturer: syz [ 3460.587381][ T54] usb 5-1: SerialNumber: syz [ 3460.763324][ T54] usb 5-1: config 0 descriptor?? 13:47:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000680)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='statm\x00') preadv(r0, &(0x7f0000000500), 0x2db, 0x0, 0x0) 13:47:27 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x500, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 13:47:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:47:27 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 13:47:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0xdfd8}, 0x40) [ 3461.040505][ T32] audit: type=1800 audit(1610891247.651:181): pid=14808 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15771 res=0 errno=0 13:47:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {0xac}, {0x6}]}) [ 3461.203695][ T32] audit: type=1800 audit(1610891247.821:182): pid=14815 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15771 res=0 errno=0 [ 3461.242455][ T54] gs_usb 5-1:0.0: Configuring for 2 interfaces 13:47:28 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5332, &(0x7f0000000540)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x7a120, 0x6bc22b84}) [ 3461.421877][T10816] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3461.530811][ T32] audit: type=1326 audit(1610891248.141:183): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14816 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 3461.682100][T10816] usb 2-1: Using ep0 maxpacket: 8 [ 3461.687727][ T54] gs_usb 5-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 3461.783207][ T54] gs_usb: probe of 5-1:0.0 failed with error -71 [ 3461.807600][ T54] usb 5-1: USB disconnect, device number 12 [ 3461.818086][T10816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3461.829178][T10816] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3461.840460][T10816] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3461.853598][T10816] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3461.908124][ T32] audit: type=1800 audit(1610891248.521:184): pid=14830 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15772 res=0 errno=0 [ 3461.985449][ T32] audit: type=1800 audit(1610891248.581:185): pid=14830 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15772 res=0 errno=0 13:47:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1262, 0x0) [ 3462.122804][T10816] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3462.133160][T10816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3462.141740][T10816] usb 2-1: Product: syz [ 3462.150545][T10816] usb 2-1: Manufacturer: syz [ 3462.156896][T10816] usb 2-1: SerialNumber: syz [ 3462.276478][ T32] audit: type=1326 audit(1610891248.891:186): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14816 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 13:47:29 executing program 2: unshare(0x24020400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) [ 3462.501721][T11847] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3462.742963][T11847] usb 5-1: Using ep0 maxpacket: 8 [ 3462.803215][ T1248] usb 2-1: USB disconnect, device number 69 [ 3463.022972][T11847] usb 5-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 3463.032333][T11847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3463.040589][T11847] usb 5-1: Product: syz [ 3463.045000][T11847] usb 5-1: Manufacturer: syz [ 3463.049692][T11847] usb 5-1: SerialNumber: syz [ 3463.252823][T11847] usb 5-1: config 0 descriptor?? 13:47:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x5a, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:47:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x1e}]}, 0x38}, 0x1, 0xfeffffff00000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13:47:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r2, 0x0, 0x200000000000c8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x40000000000c9, 0x0, 0x0) [ 3463.391499][T11847] usb 5-1: can't set config #0, error -71 [ 3463.416403][T11847] usb 5-1: USB disconnect, device number 13 [ 3463.770392][T14882] user requested TSC rate below hardware speed 13:47:31 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302061400052406000005240000000d240f010000000000000000000c241b07000104070104007f0524150500082407e30000f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 13:47:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5332, &(0x7f0000000540)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x7a120, 0x6bc22b84}) 13:47:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) 13:47:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x90000001) 13:47:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c}, 0x4c}}, 0x0) 13:47:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000140)=[{r1}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) 13:47:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5332, &(0x7f0000000540)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x7a120, 0x6bc22b84}) 13:47:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x27a, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/30, 0xf}, {&(0x7f00000001c0)=""/219, 0x2000029b}], 0x2}}], 0x2, 0x0, 0x0) 13:47:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x87, &(0x7f0000000200), 0x303}], 0x8d9, 0x0) 13:47:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1405, 0x1f7b5f81cda46f11, 0x0, 0x0, "", [{{0x8}, {0x8, 0x5}}]}, 0x20}}, 0x0) [ 3464.881690][T11847] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 3465.121664][T11847] usb 2-1: Using ep0 maxpacket: 8 13:47:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) 13:47:31 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5332, &(0x7f0000000540)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x7a120, 0x6bc22b84}) [ 3465.242409][T11847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3465.253124][T11847] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3465.264651][T11847] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3465.280312][T11847] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3465.591712][T11847] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3465.601589][T11847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3465.609701][T11847] usb 2-1: Product: syz [ 3465.619350][T11847] usb 2-1: Manufacturer: syz [ 3465.624145][T11847] usb 2-1: SerialNumber: syz [ 3466.107198][T10816] usb 2-1: USB disconnect, device number 70 13:47:33 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}}}, 0x0) 13:47:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f00000015c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)=0x74) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000140)={r3}, &(0x7f0000000080)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000280)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x7e}}], 0x30}], 0x5b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x78, &(0x7f0000000300), 0x4) 13:47:33 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e0000001000000006000000001e40000000000000000000000000008b000000001000003800020000000000000003"], 0x44) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x0, {0x0, {}, 0xac}}, 0xa0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:47:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x44d}}}}]}}]}}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x6a, {0x6a, 0x0, "767b8a2864086e88899184b0a78f22c6b39cbdf5dbfbe3ff4e53abcfd60431bacdf156d15c9b06ef7a9a579bddd6647e4b9d9f89ec2a4715d07f92e93a53c3e38be9e83856e522a5489e3b12d8d4c79c7b41e9e5b2c3e3d6fbb809c27593c9738aa7729e71ccfa80"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x69, {0x69, 0x0, "052f3f97d2aa989547225e337f6e868bbaa480c6b3d5d132710e00404b3f94e8b530760fce7e8875e2646a42529c6cbbe78ce4ea8729f590d780d7a64a9b11b663bc4be88b6925d2e9fe80c9342d972106e8cb3fa6b95cf8344545ebe404262590d9b80e4d0a26"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 13:47:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000080)={0x1, 0x0, 0x26a26c5e613a48a2}) 13:47:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_GATEWAY={0x14, 0x7, @loopback}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 3466.775372][T14952] bridge19: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 3466.790035][T14952] bridge19: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 13:47:33 executing program 1: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/cpuinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x6000200b}) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x80000004, 0x0, 0x0) 13:47:33 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}}}, 0x0) [ 3467.060979][T14965] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3467.099796][T14965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3467.107253][T14965] IPv6: NLM_F_CREATE should be set when creating new route [ 3467.128039][T14965] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3467.172501][T14969] bridge19: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 13:47:33 executing program 1: unshare(0x400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 13:47:34 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}}}, 0x0) 13:47:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'cbcmac-aes-neon\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) [ 3467.568812][T14974] bridge19: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 13:47:34 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}}}, 0x0) 13:47:34 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3467.850966][T14965] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 13:47:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7c, &(0x7f00000007c0), &(0x7f0000000800)=0x8) 13:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_GATEWAY={0x14, 0x7, @loopback}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 3468.009479][T14984] bridge19: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 3468.239782][T14991] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3468.278775][T14991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3468.286250][T14991] IPv6: NLM_F_CREATE should be set when creating new route [ 3468.317914][T14991] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 13:47:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:47:36 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 13:47:36 executing program 0: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cr4, @cstype0], 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:47:36 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r2, 0x200004) pread64(r1, &(0x7f0000000200)=""/113, 0x71, 0x0) 13:47:36 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 13:47:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_GATEWAY={0x14, 0x7, @loopback}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 3469.853694][T14998] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3469.939260][T15000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3469.946710][T15000] IPv6: NLM_F_CREATE should be set when creating new route [ 3470.001678][T15006] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 13:47:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 13:47:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x54}, {0x6, 0x0, 0x0, 0x7ffc0000}]}) 13:47:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="01100000000000000101000001000748000000021040040000000000010000000500000000000000e0ffffffffffffff0400000000000000018000000000000001000000000000000001050000000000072800000001080005000200000000000000faffffffffdcffff9500000000000000ff0f00"/144], 0x90) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r6}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f00000002c0)={0x5, 0x70, 0x5, 0x6, 0x20, 0x5, 0x0, 0x7, 0x11200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf2, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x2b0c, 0x1ff, 0x1f, 0x1, 0x7, 0xfffffffc, 0x7ff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r6, 0x29, 0x1f, 0x57, 0x7ae, 0x26, @dev={0xfe, 0x80, [], 0x28}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0xf, 0x1, 0x4}}) sendmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='i', 0x1}], 0x1}}], 0x1, 0x2400c06d) [ 3470.648526][ T32] audit: type=1326 audit(1610891257.261:187): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15019 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x7ffc0000 [ 3470.670354][ T32] audit: type=1326 audit(1610891257.261:188): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15019 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45e219 code=0x7ffc0000 [ 3470.691840][ T32] audit: type=1326 audit(1610891257.261:189): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15019 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45e219 code=0x7ffc0000 [ 3470.713208][ T32] audit: type=1326 audit(1610891257.271:190): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15019 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x7ffc0000 13:47:37 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r0, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) r1 = socket(0x18, 0x0, 0x1) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x15, &(0x7f0000000000), 0x20a154cc) [ 3470.735677][ T32] audit: type=1326 audit(1610891257.271:191): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15019 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x45e219 code=0x7ffc0000 13:47:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) 13:47:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_GATEWAY={0x14, 0x7, @loopback}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13:47:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3}, 0x10}, 0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x6, 0xff}, {0x0, 0x6}], 0xee00}, 0x18, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x124, r3, 0x6, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "47e3595e85b7115ed1e7e98c5242fb52162628809799f919"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dedc5fa0648450321ec2f86ff0e89c1ef936468446c8a1db"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec680c269cc7f3923f33f855bd60f7566ed32d3560e5c66b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x124}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 13:47:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@prinfo={0x18}, @authinfo={0x18}], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 13:47:37 executing program 2: gettid() openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000200)={0x40800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000100)=""/138, 0x0}, 0x58) [ 3471.256038][T15035] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3471.329532][T15041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3471.336993][T15041] IPv6: NLM_F_CREATE should be set when creating new route [ 3471.390739][T15035] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 13:47:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 3471.638836][T15043] IPVS: ftp: loaded support on port[0] = 21 13:47:38 executing program 3: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:47:38 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r0, 0x5460, 0x7fffffffefff) 13:47:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)={0xd0, 0x0, r3, [{{0x40000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0x0, 0x21, 0x0, '*\n\xc7\xcd\xe4\xc8\x152\xd5\x96I\xcd?\xb2=\xa3gD\x98R7\f\xc9\xd6\xfa\xff\xff\xff\xff\xff\xff\xff\xad'}}]}, 0xd0) 13:47:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x5, 0x0) [ 3472.235835][T15043] IPVS: ftp: loaded support on port[0] = 21 13:47:39 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 13:47:39 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380)="263abd040e98ff4dc870bd6688a8640888", 0x0}, 0x48) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0xffffc000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81, 0x6f}, 0x8, 0x0, 0x6, 0x1ff, r0, r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd040e98ff4dc870bd6688a8640888a8", 0x0, 0x200}, 0x28) close(r2) [ 3472.650819][T15102] CUSE: zero length info key specified 13:47:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x58, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @remote}}, {0x14, 0x4, @loopback}}}]}]}, 0x58}}, 0x0) 13:47:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="55530700ae897094e61b0fb1f147a869c5dabcda97014d25d86800278dcff47d010068fbe9bd378f36467920ee72a9a18e37108b1464a1", 0x37}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 13:47:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @ipv4={[], [], @local}}, {0x2, 0x0, 0x0, @loopback}, r1}}, 0x48) 13:47:39 executing program 2: gettid() openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000200)={0x40800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000100)=""/138, 0x0}, 0x58) 13:47:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x4}}]}, 0x30}}, 0x0) 13:47:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/30, 0x101}) [ 3473.303963][T15118] IPVS: ftp: loaded support on port[0] = 21 13:47:40 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 13:47:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x4c}}, 0x0) 13:47:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e71b0fb1f138a925d86800278dcff47d01000067dd32378f364602812c66538d75000000000000000000bb9fb045f2d1eaa302ab6c2fef23631e3ea1315b9532f3af2f5e153eb78020fa00eb29884a07da1f7cbee7547a405704878afe50a73a66faff77be062c5d8d5ac1adf5ce37ff15e457920611a4210db259a7a63f09bf0945a8e47e4dcfd6d49061492187ca54b888b8cba803db8e99a6ff2b67279214ef6168bf6a4b6d28e4bb588c2cc22aa223418a41d5fcab3c", 0xc0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 13:47:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffa]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 13:47:40 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000f6b000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 13:47:40 executing program 2: gettid() openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000200)={0x40800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000100)=""/138, 0x0}, 0x58) 13:47:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x4c}}, 0x0) 13:47:41 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x20, r2, 0x221, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:47:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x10, @broadcast}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 13:47:41 executing program 2: gettid() openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000200)={0x40800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {}, 0x0, 0x0, &(0x7f0000000100)=""/138, 0x0}, 0x58) 13:47:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffa]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) [ 3475.336540][T15174] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 13:47:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x4c}}, 0x0) [ 3475.513303][T15178] IPVS: ftp: loaded support on port[0] = 21 13:47:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9f) 13:47:43 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8130000130001052abd7000fcdbdf251a0803084e2400060001000004000000feffffff0180000008000000060000007f0100006a000000", @ANYRES32=0x0, @ANYBLOB="0100000060000000fffbffff01000000b80001000a1194"], 0x13a8}}, 0x0) 13:47:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x4c}}, 0x0) 13:47:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000007c0)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:47:43 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 13:47:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$cgroup_freezer_state(r0, &(0x7f0000000240)='freezer.state\x00', 0x2, 0x0) 13:47:45 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/133, 0x85}], 0x1) 13:47:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f0000004100)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 3479.046891][T15226] input: syz1 as /devices/virtual/input/input227 13:47:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) 13:47:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000005780)) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000002600011f"], 0x40}}, 0x0) 13:47:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffa]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 13:47:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80) 13:47:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x4000000, 0x158, 0x250, 0x0, 0x360, 0x240, 0x240, 0x360, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x40, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfff9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:47:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000780)='\x97&\x89\x87\x83*\xe4\x16ZO\x94:\xe1\x01\xe5`iq@Nse;Bz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3z\xfd\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\x01Y\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x00_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7\xaf\xcf\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000940000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r2, 0x1000000000016) 13:47:51 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f90a, 0x10000000, [], @p_u16=0x0}}) 13:47:51 executing program 1: unshare(0x20020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x16, 0x0, 0x0) [ 3485.140334][T15261] xt_CT: You must specify a L4 protocol and not use inversions on it 13:47:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x7ffffff7) 13:47:52 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 13:47:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x4000000, 0x158, 0x250, 0x0, 0x360, 0x240, 0x240, 0x360, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x40, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfff9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 3486.010739][T15275] xt_CT: You must specify a L4 protocol and not use inversions on it 13:47:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f00000005c0)=0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xea2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x3, 0x18}, 0xc) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)=@rc={0x1f, @any, 0x10}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="5dc47b58bbfa070c2033a189c9e514de16cf0501e8c961722327d17045c42e6d5ca17871890016c4ad17e7bf07591f26f61fff33ed48e3be35d0d676bb971b395a67cec88bdbed35d882c3c8acc0ba053cb8c0169767230444a636b5f41754e6f523c38ddd9ca4b3b399d593fefac7214c5f469ad5006d75dbf07bd22c7e8d80edbff1a36b4edfab9ab6c5f836", 0x8d}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x258}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='devices.list\x00', 0x275a, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000003c0), 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 3486.631407][ C1] sd 0:0:1:0: [sg0] tag#6922 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3486.642129][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB: Test Unit Ready [ 3486.648743][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.658627][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.668433][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.678249][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.688116][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.698088][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.707920][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.717746][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.727546][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.737511][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.747339][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.758380][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3486.768208][ C1] sd 0:0:1:0: [sg0] tag#6922 CDB[c0]: 00 00 00 00 00 00 00 00 13:47:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x4000000, 0x158, 0x250, 0x0, 0x360, 0x240, 0x240, 0x360, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x40, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfff9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 3487.283168][ C1] sd 0:0:1:0: [sg0] tag#6923 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3487.293949][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB: Test Unit Ready [ 3487.300630][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.310542][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.320513][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.330396][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.340391][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.350416][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.360297][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.370169][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.380061][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.389927][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.399918][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.409822][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3487.419755][ C1] sd 0:0:1:0: [sg0] tag#6923 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3487.801840][T15288] xt_CT: You must specify a L4 protocol and not use inversions on it 13:47:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102010ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x4000000, 0x158, 0x250, 0x0, 0x360, 0x240, 0x240, 0x360, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'caif0\x00', {0x1, 0x0, 0x40, 0x0, 0x0, 0x8, 0x1, 0x400}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfff9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 3488.710381][T15291] xt_CT: You must specify a L4 protocol and not use inversions on it 13:48:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffa]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 13:48:00 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local}) r2 = dup2(r0, r0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000100)={{@local}, 0x1}) 13:48:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f00000005c0)=0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xea2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x3, 0x18}, 0xc) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)=@rc={0x1f, @any, 0x10}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="5dc47b58bbfa070c2033a189c9e514de16cf0501e8c961722327d17045c42e6d5ca17871890016c4ad17e7bf07591f26f61fff33ed48e3be35d0d676bb971b395a67cec88bdbed35d882c3c8acc0ba053cb8c0169767230444a636b5f41754e6f523c38ddd9ca4b3b399d593fefac7214c5f469ad5006d75dbf07bd22c7e8d80edbff1a36b4edfab9ab6c5f836", 0x8d}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x258}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='devices.list\x00', 0x275a, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000003c0), 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 13:48:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r1, 0x709, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 13:48:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) 13:48:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0xffffffffffffff36) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) memfd_create(&(0x7f0000000040)='/dev/loop0\x00', 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x4, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:48:02 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c71107ff7f0d270c427c91acd572859b51a89b83e16ca2c692eab501442e", 0x86) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 13:48:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f00000005c0)=0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xea2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x3, 0x18}, 0xc) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)=@rc={0x1f, @any, 0x10}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="5dc47b58bbfa070c2033a189c9e514de16cf0501e8c961722327d17045c42e6d5ca17871890016c4ad17e7bf07591f26f61fff33ed48e3be35d0d676bb971b395a67cec88bdbed35d882c3c8acc0ba053cb8c0169767230444a636b5f41754e6f523c38ddd9ca4b3b399d593fefac7214c5f469ad5006d75dbf07bd22c7e8d80edbff1a36b4edfab9ab6c5f836", 0x8d}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x258}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='devices.list\x00', 0x275a, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000003c0), 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 13:48:03 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x317f, 0x0, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 13:48:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) write(r2, &(0x7f0000000140)="2400000052001f0014def407000904000a00fb751000d9b3484e17d6fdb0d27306807e07", 0x24) [ 3496.921490][ C1] sd 0:0:1:0: [sg0] tag#6915 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3496.932172][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB: Test Unit Ready [ 3496.938844][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3496.948777][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3496.958622][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3496.968824][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3496.980287][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3496.992499][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.002380][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.012244][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.022130][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.031992][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.042034][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.051887][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3497.061725][ C1] sd 0:0:1:0: [sg0] tag#6915 CDB[c0]: 00 00 00 00 00 00 00 00 [ 3497.206381][T15329] not chained 170000 origins [ 3497.211053][T15329] CPU: 1 PID: 15329 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 3497.211053][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3497.211053][T15329] Call Trace: [ 3497.211053][T15329] dump_stack+0x21c/0x280 [ 3497.211053][T15329] kmsan_internal_chain_origin+0x6f/0x130 [ 3497.211053][T15329] ? kmsan_get_metadata+0x116/0x180 [ 3497.211053][T15329] ? kmsan_internal_check_memory+0xb1/0x520 [ 3497.211053][T15329] ? kmsan_internal_set_origin+0x85/0xc0 [ 3497.211053][T15329] ? kmsan_get_metadata+0x116/0x180 [ 3497.211053][T15329] ? kmsan_get_metadata+0x116/0x180 [ 3497.211053][T15329] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3497.211053][T15329] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3497.211053][T15329] ? kmsan_get_metadata+0x116/0x180 [ 3497.211053][T15329] ? kmsan_internal_set_origin+0x85/0xc0 [ 3497.291507][T15329] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3497.291507][T15329] ? _copy_from_user+0x1fd/0x300 [ 3497.291507][T15329] ? kmsan_get_metadata+0x116/0x180 [ 3497.291507][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.291507][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.291507][T15329] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3497.291507][T15329] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 3497.291507][T15329] ? get_timespec64+0x2ca/0x360 [ 3497.291507][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.291507][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.291507][T15329] do_syscall_64+0x9f/0x140 [ 3497.291507][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.291507][T15329] RIP: 0033:0x45e219 [ 3497.291507][T15329] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3497.372138][T15329] RSP: 002b:00007fa437874c68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3497.372138][T15329] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 3497.372138][T15329] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000006 [ 3497.372138][T15329] RBP: 000000000119c120 R08: 00000000200001c0 R09: 0000000000000000 [ 3497.415119][T15329] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000119c0dc [ 3497.415119][T15329] R13: 00000000016afb5f R14: 00007fa4378759c0 R15: 000000000119c0dc [ 3497.415119][T15329] Uninit was stored to memory at: [ 3497.415119][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.415119][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.415119][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.451429][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.451429][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.451429][T15329] do_syscall_64+0x9f/0x140 [ 3497.451429][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.467106][T15329] [ 3497.467106][T15329] Uninit was stored to memory at: [ 3497.467106][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.467106][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.467106][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.467106][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.467106][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.467106][T15329] do_syscall_64+0x9f/0x140 [ 3497.467106][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.467106][T15329] [ 3497.467106][T15329] Uninit was stored to memory at: [ 3497.467106][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.467106][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.467106][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.467106][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.467106][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.544062][T15329] do_syscall_64+0x9f/0x140 [ 3497.544062][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 13:48:04 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') [ 3497.544062][T15329] [ 3497.544062][T15329] Uninit was stored to memory at: [ 3497.544062][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.544062][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.544062][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.544062][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.544062][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.544062][T15329] do_syscall_64+0x9f/0x140 [ 3497.544062][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.602230][T15329] [ 3497.602230][T15329] Uninit was stored to memory at: [ 3497.602230][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.602230][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.602230][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.602230][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.631264][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.631264][T15329] do_syscall_64+0x9f/0x140 [ 3497.631264][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.631264][T15329] [ 3497.631264][T15329] Uninit was stored to memory at: [ 3497.631264][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.631264][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.631264][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.631264][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.631264][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.631264][T15329] do_syscall_64+0x9f/0x140 [ 3497.631264][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.631264][T15329] [ 3497.631264][T15329] Uninit was stored to memory at: [ 3497.631264][T15329] kmsan_internal_chain_origin+0xad/0x130 [ 3497.631264][T15329] __msan_chain_origin+0x57/0xa0 [ 3497.631264][T15329] do_recvmmsg+0x180c/0x22f0 [ 3497.631264][T15329] __se_sys_recvmmsg+0x2dc/0x410 [ 3497.631264][T15329] __x64_sys_recvmmsg+0x62/0x80 [ 3497.631264][T15329] do_syscall_64+0x9f/0x140 [ 3497.631264][T15329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3497.631264][T15329] [ 3497.631264][T15329] Local variable ----msg_sys@do_recvmmsg created at: [ 3497.631264][T15329] do_recvmmsg+0xbf/0x22f0 [ 3497.631264][T15329] do_recvmmsg+0xbf/0x22f0 13:48:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "b81cefe44eaac171", "2abd7e7b1b92b68c11cbcc766d84eb975916b6ddc16bfffffd00", "000000bc", "0000ebffc9be00"}, 0x38) recvmmsg(r2, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x50, &(0x7f0000004a80), 0x2d, &(0x7f0000004ac0)=""/197, 0x495}}], 0x161f, 0x0, &(0x7f0000004dc0)={0x77359400}) shutdown(r2, 0x0) 13:48:05 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c71107ff7f0d270c427c91acd572859b51a89b83e16ca2c692eab501442e", 0x86) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 13:48:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f00000005c0)=0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xea2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x3, 0x18}, 0xc) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)=@rc={0x1f, @any, 0x10}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="5dc47b58bbfa070c2033a189c9e514de16cf0501e8c961722327d17045c42e6d5ca17871890016c4ad17e7bf07591f26f61fff33ed48e3be35d0d676bb971b395a67cec88bdbed35d882c3c8acc0ba053cb8c0169767230444a636b5f41754e6f523c38ddd9ca4b3b399d593fefac7214c5f469ad5006d75dbf07bd22c7e8d80edbff1a36b4edfab9ab6c5f836", 0x8d}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x258}, 0x20000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='devices.list\x00', 0x275a, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000003c0), 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 13:48:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000340)) 13:48:05 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') [ 3499.041059][ C1] sd 0:0:1:0: [sg0] tag#6918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3499.052398][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB: Test Unit Ready [ 3499.059044][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.068940][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.078797][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.088716][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.098560][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.108453][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.118300][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.128249][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.138087][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.147930][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.161788][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.171652][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3499.181518][ C1] sd 0:0:1:0: [sg0] tag#6918 CDB[c0]: 00 00 00 00 00 00 00 00 13:48:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250f00000020000780080001007bc7"], 0x194}}, 0x0) 13:48:06 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') 13:48:06 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') 13:48:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:48:06 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2172002, 0x0) 13:48:06 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') 13:48:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) 13:48:06 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') 13:48:06 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c71107ff7f0d270c427c91acd572859b51a89b83e16ca2c692eab501442e", 0x86) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 13:48:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x47000000, 0x0) lseek(r0, 0x0, 0x0) 13:48:06 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||!\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00'/89) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=')-\x9b\x17\x00') 13:48:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x200, 0x200, 0x200, 0x200, 0x0, 0x308, 0x308, 0x308, 0x308, 0x308, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e5126401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xa78, 0x0, 0x0, 0x1c}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) [ 3501.170758][T15394] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3501.182608][T15394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3501.209365][T15395] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3501.219335][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:48:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250f00000020000780080001007bc7"], 0x194}}, 0x0) 13:48:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) 13:48:07 executing program 4: futex(&(0x7f00000003c0), 0x5, 0x0, 0x0, &(0x7f0000000500), 0x12000000) 13:48:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 13:48:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x47000000, 0x0) lseek(r0, 0x0, 0x0) 13:48:08 executing program 4: futex(&(0x7f00000003c0), 0x5, 0x0, 0x0, &(0x7f0000000500), 0x12000000) 13:48:08 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d957d6c71107ff7f0d270c427c91acd572859b51a89b83e16ca2c692eab501442e", 0x86) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 13:48:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 13:48:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x47000000, 0x0) lseek(r0, 0x0, 0x0) 13:48:08 executing program 1: r0 = socket(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@in6={0x1c, 0x1c}, 0x1c) 13:48:08 executing program 4: futex(&(0x7f00000003c0), 0x5, 0x0, 0x0, &(0x7f0000000500), 0x12000000) 13:48:08 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) pipe(&(0x7f0000000200)) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) [ 3502.742259][T15427] not chained 180000 origins [ 3502.746877][T15427] CPU: 1 PID: 15427 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 3502.751044][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3502.751044][T15427] Call Trace: [ 3502.751044][T15427] dump_stack+0x21c/0x280 [ 3502.773168][T15427] kmsan_internal_chain_origin+0x6f/0x130 [ 3502.773168][T15427] ? kmsan_get_metadata+0x116/0x180 [ 3502.773168][T15427] ? kmsan_internal_check_memory+0xb1/0x520 [ 3502.773168][T15427] ? kmsan_internal_set_origin+0x85/0xc0 [ 3502.773168][T15427] ? kmsan_get_metadata+0x116/0x180 [ 3502.773168][T15427] ? kmsan_get_metadata+0x116/0x180 [ 3502.814182][T15427] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3502.822884][T15427] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3502.822884][T15427] ? kmsan_get_metadata+0x116/0x180 [ 3502.822884][T15427] ? kmsan_internal_set_origin+0x85/0xc0 [ 3502.822884][T15427] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 3502.822884][T15427] ? _copy_from_user+0x1fd/0x300 [ 3502.822884][T15427] ? kmsan_get_metadata+0x116/0x180 [ 3502.822884][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.822884][T15427] do_recvmmsg+0x180c/0x22f0 [ 3502.878734][T15426] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3502.822884][T15427] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3502.888755][T15426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3502.822884][T15427] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 3502.894373][T15427] ? get_timespec64+0x2ca/0x360 [ 3502.894392][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3502.894392][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3502.894392][T15427] do_syscall_64+0x9f/0x140 [ 3502.894392][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3502.894392][T15427] RIP: 0033:0x45e219 [ 3502.894392][T15427] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3502.894392][T15427] RSP: 002b:00007fa437874c68 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3502.894392][T15427] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 3502.894392][T15427] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000006 [ 3502.894392][T15427] RBP: 000000000119c120 R08: 00000000200001c0 R09: 0000000000000000 [ 3502.894392][T15427] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000119c0dc [ 3502.894392][T15427] R13: 00000000016afb5f R14: 00007fa4378759c0 R15: 000000000119c0dc [ 3502.894392][T15427] Uninit was stored to memory at: [ 3502.894392][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3502.894392][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.894392][T15427] do_recvmmsg+0x180c/0x22f0 [ 3502.894392][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3502.894392][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3502.894392][T15427] do_syscall_64+0x9f/0x140 [ 3502.894392][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3502.894392][T15427] [ 3502.894392][T15427] Uninit was stored to memory at: [ 3502.894392][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3502.894392][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.894392][T15427] do_recvmmsg+0x180c/0x22f0 [ 3502.894392][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3502.894392][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3502.894392][T15427] do_syscall_64+0x9f/0x140 [ 3502.894392][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3502.894392][T15427] [ 3502.894392][T15427] Uninit was stored to memory at: [ 3502.894392][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3502.894392][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.894392][T15427] do_recvmmsg+0x180c/0x22f0 [ 3502.894392][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3502.894392][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3502.894392][T15427] do_syscall_64+0x9f/0x140 [ 3502.894392][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3502.894392][T15427] [ 3502.894392][T15427] Uninit was stored to memory at: [ 3502.894392][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3502.894392][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.894392][T15427] do_recvmmsg+0x180c/0x22f0 [ 3502.894392][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3502.894392][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3502.894392][T15427] do_syscall_64+0x9f/0x140 [ 3502.894392][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3502.894392][T15427] [ 3502.894392][T15427] Uninit was stored to memory at: [ 3502.894392][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3502.894392][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.894392][T15427] do_recvmmsg+0x180c/0x22f0 [ 3502.894392][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3502.894392][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3502.894392][T15427] do_syscall_64+0x9f/0x140 [ 3502.894392][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3502.894392][T15427] [ 3502.894392][T15427] Uninit was stored to memory at: [ 3502.894392][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3502.894392][T15427] __msan_chain_origin+0x57/0xa0 [ 3502.894392][T15427] do_recvmmsg+0x180c/0x22f0 [ 3503.293000][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3503.293000][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3503.293000][T15427] do_syscall_64+0x9f/0x140 [ 3503.293000][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3503.293000][T15427] [ 3503.293000][T15427] Uninit was stored to memory at: [ 3503.293000][T15427] kmsan_internal_chain_origin+0xad/0x130 [ 3503.293000][T15427] __msan_chain_origin+0x57/0xa0 [ 3503.293000][T15427] do_recvmmsg+0x180c/0x22f0 [ 3503.293000][T15427] __se_sys_recvmmsg+0x2dc/0x410 [ 3503.293000][T15427] __x64_sys_recvmmsg+0x62/0x80 [ 3503.293000][T15427] do_syscall_64+0x9f/0x140 [ 3503.293000][T15427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3503.293000][T15427] [ 3503.293000][T15427] Local variable ----msg_sys@do_recvmmsg created at: [ 3503.376950][T15427] do_recvmmsg+0xbf/0x22f0 [ 3503.376950][T15427] do_recvmmsg+0xbf/0x22f0 13:48:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250f00000020000780080001007bc7"], 0x194}}, 0x0) 13:48:10 executing program 4: futex(&(0x7f00000003c0), 0x5, 0x0, 0x0, &(0x7f0000000500), 0x12000000) 13:48:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x47000000, 0x0) lseek(r0, 0x0, 0x0) 13:48:10 executing program 2: setpriority(0x2, 0x0, 0xfffffffffffffffe) 13:48:10 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) pipe(&(0x7f0000000200)) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) 13:48:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x28, 0x0}) 13:48:10 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x10000005}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x7ff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 13:48:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='D\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000b0001"], 0x44}}, 0x0) 13:48:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = msgget$private(0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pwritev(r2, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001140)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x400408c0}, 0x20000000) msgsnd(r1, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/51}, 0x3b, 0xb405735280f71101, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/4096) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e", 0x1}], 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001240)) 13:48:10 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) pipe(&(0x7f0000000200)) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) [ 3504.318139][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3504.385982][T15446] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3504.542568][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3504.571955][T15446] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:48:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r2) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 13:48:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fffffff, 0x0, 0x12}}]}}]}, 0x148}}, 0x0) 13:48:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250f00000020000780080001007bc7"], 0x194}}, 0x0) 13:48:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='D\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000b0001"], 0x44}}, 0x0) 13:48:11 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) pipe(&(0x7f0000000200)) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) 13:48:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1}, 0x8) close(r0) 13:48:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) 13:48:12 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$binfmt_aout(r0, &(0x7f0000000100), 0x20) 13:48:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0, 0x0) 13:48:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='D\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000b0001"], 0x44}}, 0x0) 13:48:12 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 13:48:12 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @ipv4={[], [], @multicast2}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x41401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x39, @ipv4={[], [], @broadcast}, 0xf2}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec8663e0c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 13:48:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xddffffff00000000, 0xe, 0x1f}) 13:48:12 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r0, 0x0, r3, 0x0, 0x4df3, 0x0) [ 3506.306923][T15512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3506.780563][T15520] __nla_validate_parse: 8 callbacks suppressed [ 3506.780680][T15520] netlink: 352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3506.800393][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:48:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x54}}, 0x0) 13:48:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001dc0)=ANY=[@ANYBLOB='D\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000b0001"], 0x44}}, 0x0) 13:48:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x4c, {0x0, 0x5401000000000000}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x48a, 0x0, 0x34}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 13:48:13 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @ipv4={[], [], @multicast2}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x41401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x39, @ipv4={[], [], @broadcast}, 0xf2}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec8663e0c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 13:48:13 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xffffffff, 0x4) [ 3507.231620][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3507.296463][T15535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:48:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x5605, 0x0) 13:48:14 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) 13:48:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050f000200"/20, @ANYRES32=r5, @ANYBLOB="0900f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}]}, 0x2c}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x9, @ipv4={[0x0, 0x2], [], @local}}]}, 0x40}}, 0x0) 13:48:14 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 13:48:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1c0, 0x0, 0x200, 0x1c0, 0x0, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_batadv\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x3}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@srh={{0x30, 'srh\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 13:48:14 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a"], 0x50}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 13:48:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0x58}}, 0x0) 13:48:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 13:48:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1c0, 0x0, 0x200, 0x1c0, 0x0, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_batadv\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x3}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@srh={{0x30, 'srh\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 3508.252961][T15554] Cannot find del_set index 3 as target 13:48:14 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @ipv4={[], [], @multicast2}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x41401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x39, @ipv4={[], [], @broadcast}, 0xf2}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec8663e0c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 13:48:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1c0, 0x0, 0x200, 0x1c0, 0x0, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_batadv\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x3}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@srh={{0x30, 'srh\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 3508.485877][T15566] Cannot find del_set index 3 as target [ 3508.730210][T15572] Cannot find del_set index 3 as target 13:48:15 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 13:48:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0x58}}, 0x0) 13:48:15 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b14000000800000000000001200", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f0000740002005600010002"], 0xa4}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10971, 0x0) 13:48:15 executing program 5: clone(0x21b02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x180, 0xc8, 0x0, 0x0, 0x5803, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4, @mcast2, [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x544}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf], 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 13:48:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1c0, 0x0, 0x200, 0x1c0, 0x0, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_batadv\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x3}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@srh={{0x30, 'srh\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) [ 3509.135106][T15580] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 3509.142278][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:48:15 executing program 5: clone(0x21b02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x180, 0xc8, 0x0, 0x0, 0x5803, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4, @mcast2, [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x544}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf], 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 3509.200983][T15586] Cannot find del_set index 3 as target 13:48:15 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000016c0), 0x4e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) shutdown(r0, 0x0) 13:48:15 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @ipv4={[], [], @multicast2}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x41401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x39, @ipv4={[], [], @broadcast}, 0xf2}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec8663e0c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 13:48:16 executing program 0: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x800003fa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 13:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0x58}}, 0x0) 13:48:16 executing program 5: clone(0x21b02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x180, 0xc8, 0x0, 0x0, 0x5803, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4, @mcast2, [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x544}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf], 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 3509.460996][T15594] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 3509.791785][T15605] xt_addrtype: ipv6 BLACKHOLE matching not supported 13:48:16 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@broadcast, @link_local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\nuj', 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1={0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 13:48:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000580)) 13:48:16 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000016c0), 0x4e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) shutdown(r0, 0x0) 13:48:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0x58}}, 0x0) 13:48:16 executing program 5: clone(0x21b02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x180, 0xc8, 0x0, 0x0, 0x5803, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4, @mcast2, [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x180, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x544}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf], 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 13:48:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x15, 0x8, 0x3, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000380), 0x0}, 0x20) 13:48:16 executing program 4: syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "9a0819", 0x50, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x7f, [@ipv4, @ipv4={[], [], @broadcast}, @private1, @remote]}], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 3510.329746][T15616] xt_addrtype: ipv6 BLACKHOLE matching not supported 13:48:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, 0x0) 13:48:17 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8c41, 0x0) 13:48:17 executing program 4: unshare(0x2000400) r0 = syz_io_uring_setup(0x2, &(0x7f00000000c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x8, 0x0, 0x0) 13:48:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200225e1d316adb04da4613000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00\'\x00'/20, @ANYRES32=r4, @ANYBLOB="000002000000000000000000"], 0x24}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:48:17 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000016c0), 0x4e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) shutdown(r0, 0x0) 13:48:17 executing program 5: r0 = socket(0x1d, 0x2, 0x6) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) 13:48:17 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x20004825) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xfffff000) 13:48:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 13:48:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @pix_mp={0x0, 0x0, 0x32315241}}) 13:48:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000001c00bfe200"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 13:48:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 13:48:17 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(r0, &(0x7f00000016c0), 0x4e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) shutdown(r0, 0x0) 13:48:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 13:48:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x3) 13:48:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff103}}) 13:48:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000001c00bfe200"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 13:48:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x9, &(0x7f0000000280)="5cf249b97f0c868444"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:48:18 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r0, 0x0, 0x0) 13:48:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x20004825) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xfffff000) 13:48:18 executing program 0: socket$inet6(0xa, 0x2, 0x7) 13:48:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="b99e703c", 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 13:48:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000001c00bfe200"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) 13:48:18 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) write(r0, &(0x7f0000000000)='\v', 0x23f4c0) 13:48:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 13:48:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x154}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:48:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000001c00bfe200"}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) [ 3512.673600][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3512.804939][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 13:48:19 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 13:48:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 13:48:21 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300238e0f28499f6393990d13c38a48e393eb38332366f5233bcb857ae3982a4fe8638fe7d85d68b5c1916e709d591624ae31b9d56b8d28e85d4f29", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x50}}, 0x0) 13:48:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)) 13:48:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x101, 0x0, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@dev, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 13:48:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) ioctl$PPPIOCSPASS(r0, 0x40047459, &(0x7f00000000c0)={0x0, 0x0}) 13:48:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 13:48:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x20004825) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xfffff000) 13:48:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 13:48:22 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) 13:48:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 13:48:22 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r0, 0x82000000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0x40044103, &(0x7f0000000540)) 13:48:22 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300238e0f28499f6393990d13c38a48e393eb38332366f5233bcb857ae3982a4fe8638fe7d85d68b5c1916e709d591624ae31b9d56b8d28e85d4f29", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x50}}, 0x0) 13:48:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)="24000000520007031dfffd946f6105311c0000040000000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:48:22 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$can_raw(0x1d, 0x3, 0x1) 13:48:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0xa89b247b189e6b27, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) 13:48:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8}]}, 0x2c}}, 0x0) 13:48:22 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300238e0f28499f6393990d13c38a48e393eb38332366f5233bcb857ae3982a4fe8638fe7d85d68b5c1916e709d591624ae31b9d56b8d28e85d4f29", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x50}}, 0x0) 13:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xec], 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 13:48:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29cc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x20004825) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xfffff000) 13:48:23 executing program 0: syz_emit_ethernet(0xa72, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0xa38, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xb, "a78c000005dc791153d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a2a1328c5f93037dc1435c11b3000000008403af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x84, "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"}, {0x0, 0x1, "b20360609ee68487"}, {}, {0x0, 0x9c, "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"}]}}}}}}, 0x0) 13:48:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup2(r0, r1) 13:48:23 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, ' H@', 0x0, 0x3a, 0x0, @loopback, @mcast2, [], "80ffffff00740000"}}}}}}}, 0x0) 13:48:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300238e0f28499f6393990d13c38a48e393eb38332366f5233bcb857ae3982a4fe8638fe7d85d68b5c1916e709d591624ae31b9d56b8d28e85d4f29", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x50}}, 0x0) 13:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xec], 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 13:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xec], 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 13:48:23 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 13:48:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:48:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000b67000), &(0x7f0000000000)=0x4) 13:48:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xec], 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 13:48:23 executing program 1: unshare(0x40000000) unshare(0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000fffffffd0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f90000000000000000001000000000000000000000000000000000000000000000000002000000020000007f00000100000000000000000000000000000000000000000000000000000100000000000000000000000000000000200000a2090000000000000000000000000000000000000000000000000000000000000000000000000000000000040002a01e44f300000000000000000000000000000000000000000000000002"], 0xfffffde3) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) [ 3517.693829][T15794] IPVS: ftp: loaded support on port[0] = 21 [ 3518.149917][T15794] IPVS: ftp: loaded support on port[0] = 21 13:48:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r3, 0x0, r1, 0x0, 0x7fff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 13:48:25 executing program 4: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) tkill(r0, 0x38) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x0, &(0x7f0000000240)) 13:48:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000002f40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000004c0)) 13:48:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 13:48:25 executing program 1: unshare(0x40000000) unshare(0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000fffffffd0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f90000000000000000001000000000000000000000000000000000000000000000000002000000020000007f00000100000000000000000000000000000000000000000000000000000100000000000000000000000000000000200000a2090000000000000000000000000000000000000000000000000000000000000000000000000000000000040002a01e44f300000000000000000000000000000000000000000000000002"], 0xfffffde3) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 13:48:25 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 3518.723858][T15848] IPVS: ftp: loaded support on port[0] = 21 13:48:25 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) read$hiddev(r2, 0x0, 0x0) 13:48:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000002f40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000004c0)) [ 3519.245688][T15881] new mount options do not match the existing superblock, will be ignored [ 3519.327609][T15881] new mount options do not match the existing superblock, will be ignored 13:48:26 executing program 1: unshare(0x40000000) unshare(0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000fffffffd0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f90000000000000000001000000000000000000000000000000000000000000000000002000000020000007f00000100000000000000000000000000000000000000000000000000000100000000000000000000000000000000200000a2090000000000000000000000000000000000000000000000000000000000000000000000000000000000040002a01e44f300000000000000000000000000000000000000000000000002"], 0xfffffde3) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 13:48:26 executing program 4: socket(0x3, 0x0, 0xffffffff) 13:48:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000002f40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000004c0)) [ 3519.752028][T15891] IPVS: ftp: loaded support on port[0] = 21 13:48:26 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 13:48:26 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r3, 0x0, r1, 0x0, 0x7fff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 13:48:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000002f40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000004c0)) 13:48:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000c1c205"], 0x30}}, 0x0) 13:48:27 executing program 1: unshare(0x40000000) unshare(0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000fffffffd0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f90000000000000000001000000000000000000000000000000000000000000000000002000000020000007f00000100000000000000000000000000000000000000000000000000000100000000000000000000000000000000200000a2090000000000000000000000000000000000000000000000000000000000000000000000000000000000040002a01e44f300000000000000000000000000000000000000000000000002"], 0xfffffde3) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 13:48:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0xe, 0x9b, 0x8, 0x7, 0x0, 0x32, 0x0, 0x33, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 3520.977610][T15935] IPVS: ftp: loaded support on port[0] = 21 [ 3522.928699][ C0] not chained 190000 origins [ 3522.931062][ C0] CPU: 0 PID: 10187 Comm: kworker/u4:1 Not tainted 5.10.0-rc4-syzkaller #0 [ 3522.931062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3522.944568][ C0] Workqueue: krdsd rds_connect_worker [ 3522.944568][ C0] Call Trace: [ 3522.944568][ C0] [ 3522.944568][ C0] dump_stack+0x21c/0x280 [ 3522.944568][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] ? __should_failslab+0x1f1/0x290 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3522.944568][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 3522.944568][ C0] ? tcp_parse_options+0x225e/0x22f0 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_conn_request+0x1a1f/0x4f80 [ 3522.944568][ C0] ? worker_thread+0x123c/0x2730 [ 3522.944568][ C0] ? memcg_slab_free_hook+0x3a/0xb20 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] ? tcp_v4_fill_cb+0x562/0x5e0 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 3522.944568][ C0] ? tcp_filter+0xf0/0xf0 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 3522.944568][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] ? ip_rcv_core+0x1480/0x1480 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3522.944568][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 3522.944568][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 3522.944568][ C0] process_backlog+0x517/0xbd0 [ 3522.944568][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3522.944568][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3522.944568][ C0] napi_poll+0x40a/0x1020 [ 3522.944568][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 3522.944568][ C0] net_rx_action+0x34c/0xd30 [ 3522.944568][ C0] ? net_tx_action+0xd30/0xd30 [ 3522.944568][ C0] __do_softirq+0x1a9/0x6fa [ 3522.944568][ C0] asm_call_irq_on_stack+0xf/0x20 [ 3522.944568][ C0] [ 3522.944568][ C0] do_softirq_own_stack+0x6e/0x90 [ 3522.944568][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 3522.944568][ C0] local_bh_enable+0x36/0x40 [ 3522.944568][ C0] ip_finish_output2+0x2454/0x2940 [ 3522.944568][ C0] ? __msan_get_context_state+0x9/0x20 [ 3522.944568][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 3522.944568][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 3522.944568][ C0] __ip_finish_output+0xd08/0x1090 [ 3522.944568][ C0] ip_finish_output+0x329/0x480 [ 3522.944568][ C0] ip_output+0x32e/0x6d0 [ 3522.944568][ C0] ? ip_mc_finish_output+0x770/0x770 [ 3522.944568][ C0] ? ip_finish_output+0x480/0x480 [ 3522.944568][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 3522.944568][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 3522.944568][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 3522.944568][ C0] ip_queue_xmit+0xcc/0xf0 [ 3522.944568][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 3522.944568][ C0] __tcp_transmit_skb+0x4cb8/0x5e20 [ 3522.944568][ C0] tcp_connect+0x104d/0x3cf0 [ 3522.944568][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 3522.944568][ C0] tcp_v4_connect+0x255c/0x26f0 [ 3522.944568][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 3522.944568][ C0] __inet_stream_connect+0xaa8/0x16b0 [ 3522.944568][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 3522.944568][ C0] ? local_bh_enable+0x36/0x40 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] inet_stream_connect+0x101/0x180 [ 3522.944568][ C0] ? __inet_stream_connect+0x16b0/0x16b0 [ 3522.944568][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 3522.944568][ C0] ? kmsan_get_metadata+0x116/0x180 [ 3522.944568][ C0] ? rds_tcp_state_change+0x400/0x400 [ 3522.944568][ C0] rds_connect_worker+0x368/0x550 [ 3522.944568][ C0] ? rds_addr_cmp+0x290/0x290 [ 3522.944568][ C0] process_one_work+0x1219/0x1fe0 [ 3522.944568][ C0] worker_thread+0x123c/0x2730 [ 3522.944568][ C0] kthread+0x51c/0x560 [ 3522.944568][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 3522.944568][ C0] ? kthread_blkcg+0x110/0x110 [ 3522.944568][ C0] ret_from_fork+0x1f/0x30 [ 3522.944568][ C0] Uninit was stored to memory at: [ 3522.944568][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_conn_request+0x1b6d/0x4f80 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3522.944568][ C0] process_backlog+0x517/0xbd0 [ 3522.944568][ C0] napi_poll+0x40a/0x1020 [ 3522.944568][ C0] net_rx_action+0x34c/0xd30 [ 3522.944568][ C0] __do_softirq+0x1a9/0x6fa [ 3522.944568][ C0] [ 3522.944568][ C0] Uninit was stored to memory at: [ 3522.944568][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 3522.944568][ C0] tcp_conn_request+0x300d/0x4f80 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3522.944568][ C0] process_backlog+0x517/0xbd0 [ 3522.944568][ C0] napi_poll+0x40a/0x1020 [ 3522.944568][ C0] net_rx_action+0x34c/0xd30 [ 3522.944568][ C0] __do_softirq+0x1a9/0x6fa [ 3522.944568][ C0] [ 3522.944568][ C0] Uninit was stored to memory at: [ 3522.944568][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_conn_request+0x1b6d/0x4f80 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3522.944568][ C0] process_backlog+0x517/0xbd0 [ 3522.944568][ C0] napi_poll+0x40a/0x1020 [ 3522.944568][ C0] net_rx_action+0x34c/0xd30 [ 3522.944568][ C0] __do_softirq+0x1a9/0x6fa [ 3522.944568][ C0] [ 3522.944568][ C0] Uninit was stored to memory at: [ 3522.944568][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 3522.944568][ C0] tcp_conn_request+0x300d/0x4f80 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3522.944568][ C0] process_backlog+0x517/0xbd0 [ 3522.944568][ C0] napi_poll+0x40a/0x1020 [ 3522.944568][ C0] net_rx_action+0x34c/0xd30 [ 3522.944568][ C0] __do_softirq+0x1a9/0x6fa [ 3522.944568][ C0] [ 3522.944568][ C0] Uninit was stored to memory at: [ 3522.944568][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_conn_request+0x1b6d/0x4f80 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3522.944568][ C0] process_backlog+0x517/0xbd0 [ 3522.944568][ C0] napi_poll+0x40a/0x1020 [ 3522.944568][ C0] net_rx_action+0x34c/0xd30 [ 3522.944568][ C0] __do_softirq+0x1a9/0x6fa [ 3522.944568][ C0] [ 3522.944568][ C0] Uninit was stored to memory at: [ 3522.944568][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3522.944568][ C0] __msan_chain_origin+0x57/0xa0 [ 3522.944568][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 3522.944568][ C0] tcp_conn_request+0x300d/0x4f80 [ 3522.944568][ C0] tcp_v4_conn_request+0x201/0x290 [ 3522.944568][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3522.944568][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3522.944568][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3522.944568][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3522.944568][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3522.944568][ C0] ip_local_deliver+0x585/0x8d0 [ 3522.944568][ C0] ip_rcv+0x599/0x820 [ 3522.944568][ C0] __netif_receive_skb+0x1ec/0x640 [ 3523.920732][ C0] process_backlog+0x517/0xbd0 [ 3523.921112][ C0] napi_poll+0x40a/0x1020 [ 3523.921112][ C0] net_rx_action+0x34c/0xd30 [ 3523.921112][ C0] __do_softirq+0x1a9/0x6fa [ 3523.921112][ C0] [ 3523.921112][ C0] Uninit was stored to memory at: [ 3523.921112][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 3523.921112][ C0] __msan_chain_origin+0x57/0xa0 [ 3523.921112][ C0] tcp_conn_request+0x1b6d/0x4f80 [ 3523.921112][ C0] tcp_v4_conn_request+0x201/0x290 [ 3523.921112][ C0] tcp_v6_conn_request+0xeb/0x330 [ 3523.921112][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3523.921112][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3523.921112][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3523.921112][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3523.921112][ C0] ip_local_deliver+0x585/0x8d0 [ 3523.921112][ C0] ip_rcv+0x599/0x820 [ 3523.921112][ C0] __netif_receive_skb+0x1ec/0x640 [ 3523.921112][ C0] process_backlog+0x517/0xbd0 [ 3523.921112][ C0] napi_poll+0x40a/0x1020 [ 3523.921112][ C0] net_rx_action+0x34c/0xd30 [ 3523.921112][ C0] __do_softirq+0x1a9/0x6fa [ 3523.921112][ C0] [ 3523.921112][ C0] Uninit was created at: [ 3523.921112][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 3523.921112][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 3523.921112][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 3523.921112][ C0] alloc_pages_current+0x7b6/0xb60 [ 3523.921112][ C0] allocate_slab+0x346/0x11a0 [ 3523.921112][ C0] ___slab_alloc+0xd42/0x1930 [ 3523.921112][ C0] kmem_cache_alloc+0xb71/0x1040 [ 3523.921112][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 3523.921112][ C0] tcp_conn_request+0x842/0x4f80 [ 3523.921112][ C0] tcp_v4_conn_request+0x201/0x290 [ 3523.921112][ C0] tcp_rcv_state_process+0x2de/0x4490 [ 3523.921112][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 3523.921112][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 3523.921112][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 3523.921112][ C0] ip_local_deliver+0x585/0x8d0 [ 3523.921112][ C0] ip_sublist_rcv+0x121b/0x1560 [ 3523.921112][ C0] ip_list_rcv+0x8f1/0x960 [ 3523.921112][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 3523.921112][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 3523.921112][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 3523.921112][ C0] napi_complete_done+0x552/0xf80 [ 3523.921112][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 3523.921112][ C0] virtnet_poll+0x170f/0x1d10 [ 3523.921112][ C0] napi_poll+0x40a/0x1020 [ 3523.921112][ C0] net_rx_action+0x34c/0xd30 [ 3523.921112][ C0] __do_softirq+0x1a9/0x6fa 13:48:34 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 13:48:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) dup2(r0, r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 13:48:34 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 13:48:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r3, 0x0, r1, 0x0, 0x7fff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 13:48:34 executing program 4: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) 13:48:34 executing program 1: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000ac0), 0xe) sendmsg$inet(r0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="87", 0x1}], 0x3c}, 0x0) recvmsg(r0, &(0x7f000000c780)={0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c2c0)=""/173, 0xad}], 0x1}, 0x0) [ 3528.256178][ T1996] Bluetooth: hci6: sending frame failed (-49) 13:48:35 executing program 4: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) 13:48:35 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r3, 0x0, r1, 0x0, 0x7fff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 13:48:35 executing program 1: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) 13:48:36 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}]}}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:48:36 executing program 4: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) [ 3530.171626][ T8246] Bluetooth: hci6: Entering manufacturer mode failed (-110) 13:48:36 executing program 1: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) 13:48:39 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 13:48:39 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{0xffffffffffffffff}], 0x1}}], 0x2, 0x0) 13:48:39 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 13:48:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) dup2(r0, r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 13:48:39 executing program 1: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) 13:48:39 executing program 4: syz_open_pts(0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x841280, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800000, &(0x7f0000000140)="5c98e4bd293a360ca378a012dc48e2333b1840ef9a04f93d92571b64f53ca232f394a0dbf453fbb6c86af0937839eb3f37154fe2279e563ea5ca2eb7feb47b7c30efd756", 0x0, &(0x7f0000000200), &(0x7f0000000240)="90f4480798e90c2698cd212588aceb54052d91181e87a9ad8979ef54649e55ec8ad5419b5bb63d2178c705f2f5b777528b7d5fcffaa96826b1351733c9d8c80d79cfe78d5c095951259b6494afe2b564724ed28470d274ba76664047f8fdf5151b515279fc734cc2d6e23808c9aea01a3710e43678d72afcd03f59c415d26a3a2a0126264fbb5c82a4be456b0ad8c175217b8701880a5bdb16709068be73948cb30a25fb455ebfec63ac2f410a22b96a1974f87a2973abb56c717615d810981a") clone(0x0, &(0x7f0000000340)="b2a0349ec7a2df493c01803b85233d08c288968a7d8bf54dfbadbf86186a9b0fdb6393b976670a55", 0x0, 0x0, 0x0) [ 3532.632509][T20062] Bluetooth: hci6: Frame reassembly failed (-84) 13:48:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x207, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@dev, 0x86dd}}}]}, 0x38}}, 0x0) 13:48:39 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) dup2(r0, r1) 13:48:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) 13:48:40 executing program 1: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 13:48:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x207, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@dev, 0x86dd}}}]}, 0x38}}, 0x0) 13:48:40 executing program 4: syz_usb_connect(0x0, 0x63, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7b, 0xbd, 0xe8, 0x10, 0x1199, 0x18, 0x3997, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x62, 0x5c, 0xe2, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 3534.181619][T15966] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3534.432427][T15966] usb 5-1: Using ep0 maxpacket: 16 [ 3534.575616][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3534.585525][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3534.595571][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 3534.609272][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3534.620390][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 3534.630678][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3534.643428][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 3534.654170][ T8246] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 3534.833061][T15966] usb 5-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=39.97 [ 3534.842413][T15966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3534.850515][T15966] usb 5-1: Product: syz [ 3534.854983][T15966] usb 5-1: Manufacturer: syz [ 3534.859733][T15966] usb 5-1: SerialNumber: syz [ 3534.933435][T15966] usb 5-1: config 0 descriptor?? [ 3534.976770][T15966] sierra 5-1:0.0: Sierra USB modem converter detected [ 3535.204305][T15966] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 3535.238479][T15966] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 3535.299007][T15966] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 3535.384540][T15966] usb 5-1: USB disconnect, device number 14 [ 3535.467257][T15966] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 3535.552285][T15966] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 3535.615045][T15966] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 3535.624944][T15966] sierra 5-1:0.0: device disconnected [ 3536.102140][T15966] usb 5-1: new high-speed USB device number 15 using dummy_hcd 13:48:42 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) 13:48:42 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000b9144212ee710700000000000000", @ANYRES32=0x0, @ANYBLOB="00ff0000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a"], 0x4c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:48:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x207, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@dev, 0x86dd}}}]}, 0x38}}, 0x0) 13:48:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) dup2(r0, r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 13:48:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 3536.291769][T10187] Bluetooth: hci6: Frame reassembly failed (-84) [ 3536.296008][T16139] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 3536.307098][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3536.321615][T16139] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 3536.330627][T16139] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (121150128874543) [ 3536.392079][T15966] usb 5-1: Using ep0 maxpacket: 16 [ 3536.522852][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3536.533146][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3536.543076][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 3536.553001][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3536.564321][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 3536.576771][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3536.586700][T15966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 13:48:43 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x1000}, {0x4, 0xffff}], 0x2) semop(r0, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) 13:48:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x207, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@dev, 0x86dd}}}]}, 0x38}}, 0x0) 13:48:43 executing program 4: keyctl$instantiate_iov(0xa, 0x0, &(0x7f00000007c0), 0x0, 0x0) [ 3537.191416][T16156] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 3537.199860][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3537.211423][T16156] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 3537.220375][T16156] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (121150128874543) [ 3537.271778][T15966] usb 5-1: New USB device found, idVendor=1199, idProduct=0018, bcdDevice=39.97 [ 3537.282335][T15966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:48:43 executing program 5: syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xea, 0x77, 0x61, 0x40, 0x91e, 0x3, 0xf34d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x95, 0x37, 0xb2, 0x0, [], [{}, {{0x9, 0x5, 0x3, 0x6, 0x200, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "848f2c3b0d"}]}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 3537.421807][T15966] usb 5-1: config 0 descriptor?? [ 3537.468580][T15966] usb 5-1: can't set config #0, error -71 [ 3537.528152][T15966] usb 5-1: USB disconnect, device number 15 13:48:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "02000200000006b5b6c943044900cd9400"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000a00)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x1) 13:48:44 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f821d263203", 0x7}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 3538.331977][T15966] Bluetooth: hci6: command 0xfc11 tx timeout [ 3538.338309][ T8246] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 3538.400457][T16186] ptrace attach of "/root/syz-executor.1"[16180] was attempted by "/root/syz-executor.1"[16186] 13:48:45 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 13:48:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendto(r1, 0x0, 0xfffffffffffffe18, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) close(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x0, 0x9, 0x0, [], [{0x8, 0x1, 0x9, 0x8000, 0x80000001, 0x9}, {0x80000000, 0x3, 0xfff, 0x0, 0x9, 0x8}], [[], [], [], [], [], [], [], [], []]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1ff}, 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 13:48:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in=@loopback}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 13:48:45 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x19b1, &(0x7f000000cf3d)=""/195}, 0x48) 13:48:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) dup2(r0, r1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 13:48:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 13:48:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) dup2(r3, r2) 13:48:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x19, &(0x7f0000000240)="5cf249b97f0c8684445afd26b76af2f3c921bf3c0f339e57f4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:48:46 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x19b1, &(0x7f000000cf3d)=""/195}, 0x48) [ 3539.767885][T16212] user requested TSC rate below hardware speed [ 3539.819016][T16212] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 3540.388464][T13141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3540.396768][T13141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:48:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 13:48:47 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x19b1, &(0x7f000000cf3d)=""/195}, 0x48) 13:48:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000001200)={0x20080522}, &(0x7f0000001240)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 13:48:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4c}, @ramp}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 13:48:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 3541.019653][T20064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3541.027961][T20064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:48:47 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x19b1, &(0x7f000000cf3d)=""/195}, 0x48) 13:48:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000004240)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x5}]}, 0x18}}, 0x0) 13:48:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x690, 0x78, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x70000, 0x0, 0x7]}) 13:48:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 13:48:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4068aea3, &(0x7f0000000080)={0x94, 0x0, [0xc0000100, 0x0, 0x3, 0x2, 0xda0]}) [ 3541.700784][T10187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3541.708928][T10187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3542.123324][T20064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3542.131315][T20064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3542.447783][ C1] not chained 200000 origins [ 3542.451044][ C1] CPU: 1 PID: 10187 Comm: kworker/u4:1 Not tainted 5.10.0-rc4-syzkaller #0 [ 3542.451044][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3542.451044][ C1] Workqueue: krdsd rds_connect_worker [ 3542.451044][ C1] Call Trace: [ 3542.451044][ C1] [ 3542.451044][ C1] dump_stack+0x21c/0x280 [ 3542.451044][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] ? __should_failslab+0x1f1/0x290 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3542.451044][ C1] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 3542.451044][ C1] ? tcp_parse_options+0x225e/0x22f0 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.451044][ C1] tcp_conn_request+0x1a1f/0x4f80 [ 3542.451044][ C1] ? worker_thread+0x123c/0x2730 [ 3542.451044][ C1] ? memcg_slab_free_hook+0x3a/0xb20 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.451044][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.451044][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 3542.451044][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.451044][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3542.451044][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.451044][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.451044][ C1] ? tcp_v4_fill_cb+0x562/0x5e0 [ 3542.451044][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.451044][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 3542.451044][ C1] ? tcp_filter+0xf0/0xf0 [ 3542.451044][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.629472][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.629472][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 3542.629472][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 3542.629472][ C1] ip_rcv+0x599/0x820 [ 3542.629472][ C1] ? ip_rcv_core+0x1480/0x1480 [ 3542.629472][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.629472][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 3542.629472][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 3542.629472][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 3542.674350][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] ? net_tx_action+0xd30/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] asm_call_irq_on_stack+0xf/0x20 [ 3542.674350][ C1] [ 3542.674350][ C1] do_softirq_own_stack+0x6e/0x90 [ 3542.674350][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 3542.674350][ C1] local_bh_enable+0x36/0x40 [ 3542.674350][ C1] ip_finish_output2+0x2454/0x2940 [ 3542.674350][ C1] ? __msan_get_context_state+0x9/0x20 [ 3542.674350][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 3542.674350][ C1] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 3542.674350][ C1] __ip_finish_output+0xd08/0x1090 [ 3542.674350][ C1] ip_finish_output+0x329/0x480 [ 3542.674350][ C1] ip_output+0x32e/0x6d0 [ 3542.674350][ C1] ? ip_mc_finish_output+0x770/0x770 [ 3542.674350][ C1] ? ip_finish_output+0x480/0x480 [ 3542.674350][ C1] __ip_queue_xmit+0x1e3d/0x23b0 [ 3542.674350][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 3542.674350][ C1] ? __msan_poison_alloca+0xe9/0x110 [ 3542.674350][ C1] ip_queue_xmit+0xcc/0xf0 [ 3542.674350][ C1] ? __ip_queue_xmit+0x23b0/0x23b0 [ 3542.674350][ C1] __tcp_transmit_skb+0x4cb8/0x5e20 [ 3542.674350][ C1] tcp_connect+0x104d/0x3cf0 [ 3542.674350][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 3542.674350][ C1] tcp_v4_connect+0x255c/0x26f0 [ 3542.674350][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 3542.674350][ C1] __inet_stream_connect+0xaa8/0x16b0 [ 3542.674350][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 3542.674350][ C1] ? local_bh_enable+0x36/0x40 [ 3542.674350][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.674350][ C1] inet_stream_connect+0x101/0x180 [ 3542.674350][ C1] ? __inet_stream_connect+0x16b0/0x16b0 [ 3542.674350][ C1] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 3542.674350][ C1] ? kmsan_get_metadata+0x116/0x180 [ 3542.674350][ C1] ? rds_tcp_state_change+0x400/0x400 [ 3542.674350][ C1] rds_connect_worker+0x368/0x550 [ 3542.674350][ C1] ? rds_addr_cmp+0x290/0x290 [ 3542.674350][ C1] process_one_work+0x1219/0x1fe0 [ 3542.674350][ C1] worker_thread+0x123c/0x2730 [ 3542.674350][ C1] kthread+0x51c/0x560 [ 3542.674350][ C1] ? process_one_work+0x1fe0/0x1fe0 [ 3542.674350][ C1] ? kthread_blkcg+0x110/0x110 [ 3542.674350][ C1] ret_from_fork+0x1f/0x30 [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_conn_request+0x1b6d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 3542.674350][ C1] tcp_conn_request+0x300d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_conn_request+0x1b6d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 3542.674350][ C1] tcp_conn_request+0x300d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_conn_request+0x1b6d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 3542.674350][ C1] tcp_conn_request+0x300d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was stored to memory at: [ 3542.674350][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 3542.674350][ C1] __msan_chain_origin+0x57/0xa0 [ 3542.674350][ C1] tcp_conn_request+0x1b6d/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_v6_conn_request+0xeb/0x330 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_rcv+0x599/0x820 [ 3542.674350][ C1] __netif_receive_skb+0x1ec/0x640 [ 3542.674350][ C1] process_backlog+0x517/0xbd0 [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3542.674350][ C1] [ 3542.674350][ C1] Uninit was created at: [ 3542.674350][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 3542.674350][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 3542.674350][ C1] __alloc_pages_nodemask+0x827/0xf90 [ 3542.674350][ C1] alloc_pages_current+0x7b6/0xb60 [ 3542.674350][ C1] allocate_slab+0x346/0x11a0 [ 3542.674350][ C1] ___slab_alloc+0xd42/0x1930 [ 3542.674350][ C1] kmem_cache_alloc+0xb71/0x1040 [ 3542.674350][ C1] inet_reqsk_alloc+0xaf/0x8c0 [ 3542.674350][ C1] tcp_conn_request+0x842/0x4f80 [ 3542.674350][ C1] tcp_v4_conn_request+0x201/0x290 [ 3542.674350][ C1] tcp_rcv_state_process+0x2de/0x4490 [ 3542.674350][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 3542.674350][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 3542.674350][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 3542.674350][ C1] ip_local_deliver+0x585/0x8d0 [ 3542.674350][ C1] ip_sublist_rcv+0x121b/0x1560 [ 3542.674350][ C1] ip_list_rcv+0x8f1/0x960 [ 3542.674350][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 3542.674350][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 3542.674350][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 3542.674350][ C1] napi_complete_done+0x552/0xf80 [ 3542.674350][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 3542.674350][ C1] virtnet_poll+0x170f/0x1d10 13:48:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000000203c7c33d00000500000000000020ff0f00010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xcd}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0) 13:48:50 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13:48:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$tun(0xffffffffffffff9c, 0x0, 0x88882, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3ff, 0x0, 0x0, 0x10001}, {}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x10000, 0x32}, 0x0, @in=@multicast2, 0xfffffffc, 0x0, 0x1, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) 13:48:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 13:48:50 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) 13:48:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 3542.674350][ C1] napi_poll+0x40a/0x1020 [ 3542.674350][ C1] net_rx_action+0x34c/0xd30 [ 3542.674350][ C1] __do_softirq+0x1a9/0x6fa [ 3544.030120][ T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3544.039153][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:48:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000000)) 13:48:50 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000005c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) 13:48:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0x201, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 13:48:51 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 13:48:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) 13:48:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR='\x00'/10, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}]}}]}]}]}}]}, 0x6c}}, 0x0) 13:48:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0x201, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 13:48:51 executing program 0: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000180)="1700000055000d0000000000fc07ff1b07040410f0ff00", 0x17) 13:48:52 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f5110800010002", 0x19) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 13:48:52 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES16], 0x4) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x4}}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000740)='6', 0x1}], 0x1}}], 0x2, 0xfc) 13:48:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0x201, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) [ 3545.825247][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3547.282198][T16299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3547.290208][T16299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:48:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 13:48:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007600)=@updpolicy={0xb8, 0x19, 0x7, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x8}}, 0xb8}}, 0x0) 13:48:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000ff00000000000600007f00060000e3b3dc69cfce0819ee0000010000000000000000000000efaaffe700000000000000000a"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="41000000060000008e03"]) 13:48:54 executing program 1: futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000100), 0x0) 13:48:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0x201, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 13:48:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001480)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000014c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) [ 3547.978099][T16374] user requested TSC rate below hardware speed 13:48:54 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="d9", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="0e", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000029c0)='user\x00', &(0x7f0000002980)={'syz', 0x2}, &(0x7f0000000640)="8185b4b8a6ba07e0ffa2ca088e62048f65806c715532d8684c3aeb6b2fb3cd720fb0da9c0914b3cc471b51c187a19852cb8ecb563cb21356fa0008000000000000e9a8b5e70e64b7786e909a9a18ea24a86a0ff8ed65302c9c87dc73f2d9a18f653a6a3a26bb92acd7dd820ab455821d744046bc2ad2c071c0bd3587d99e423418ac59b745cb6de88fde11f0740554cfb8bb25ea511f351e29044831cbaa27ebddd12e4e84fdae2db231b450e5a3212724de1d6c62b0e6e261b8407973c44539", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r2}, &(0x7f0000000240)=""/87, 0x57, &(0x7f0000000380)={&(0x7f0000000180)={'blake2s-256-generic\x00'}}) 13:48:54 executing program 4: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') close(r3) close(r0) 13:48:54 executing program 5: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x5}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 13:48:54 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 13:48:54 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) 13:48:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) [ 3550.677749][T16312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3550.686023][T16312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:48:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40a85321, &(0x7f0000000140)={0x80}) 13:48:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000bd000000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 13:48:57 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) 13:48:57 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64], 0x48}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x98) 13:48:57 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "ac90c06c6d456a10", "e46257e81b627ee3e40f3fadb52aaca8af06000000000000004dde64d91400", "ab012e13", "51d131909c9a39e4"}, 0x38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:48:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) close(r0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 13:48:57 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) 13:48:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0x0, 0x1c0, 0x1c0, 0x258, 0x1c0, 0x310, 0x310, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'gretap0\x00', 'dummy0\x00'}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0xfffd, 0x0, 0x21, 0x0, 'syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth0_to_bond\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="726177000000000000dd000000000000000000000000000000000000000000000900000003000000f8020000d0010000d0010000d001000000000000000000006002000060020000600200006002000060020000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006801d0010000000000000000000000000000000000000000f800726563656e740000000000000000000000000000000000000000000000000000000000000000010073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680043540000000000000000000000000000000000000000000000000000000203000000000000d9e637bd0000000020c93f9800000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ff00000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x62, 0x0) 13:48:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4000009d}]}) 13:48:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080), 0x4) dup3(r2, r3, 0x0) [ 3551.369657][T16422] x_tables: duplicate underflow at hook 2 [ 3551.398258][T16422] x_tables: duplicate underflow at hook 3 13:48:58 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) [ 3551.510418][T16427] user requested TSC rate below hardware speed [ 3551.695872][T16422] x_tables: duplicate underflow at hook 2 [ 3551.705364][T16425] x_tables: duplicate underflow at hook 3 13:48:58 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xcd49, 0x4, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x80805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x1d, 0x19, "1680ecbdcc9119c0cc02a52532785aec119e3f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448000002000000000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab", [0x712dce36, 0xfffffffffffffffc]}) 13:48:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 13:48:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1d3ceac2a2b2b64ec63f83c1ef8d9b0500000058603f198c8d0705fe057d00a5d1c86e655f1af52ca70e661cbe6779dafeb88fb74a2f48474d87295a6d13838f71ee9cda452e095796153064f1b4f9630bd2ef6c470ece9ad2e0ea7cfe989e75e69946cf3ef74bffecd8c472f2d117614c74e809acc9c9a23d0eb6ac0ed8896133f5c284e917b72e7ef796e63f14c400a0f60debc466e7ac25af82fe581f5e46f21ffa1e9a7867f5f2a2b312f88eacfa28930ec2b52c2bbb683bf9c59923940d2076"], 0x4c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 13:48:58 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x3, 0x81) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) 13:48:58 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) utimes(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)={{}, {0x77359400}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r1, r0, 0x0, 0x800100020001) [ 3552.370286][T16455] user requested TSC rate below hardware speed [ 3552.403087][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3552.414298][ C0] Buffer I/O error on dev loop7, logical block 0, async page read 13:48:59 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000d80)='./file0\x00', 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="b3eaa2b51638e433bf21fa056efb01b5ad0b1cd8c6041f9202a97465357670530a25d788a8d77556861bc9f49d147de7787bd77f06f457adc58135e801afb931021e036073f2cd5b836322d091205e67fa1533f56bf7e40fd45bdb94d331f885776598d853a1bbe34d4f4cdb1f3f0e185d3c508b60c318232a3f4630a94558adf1998ed5ec5664b439fab2509f7f4e9ef9393c90c25c729353675d7f22672e4d1144602ce5706483cac6d47b854cfa2b0554a8c66e92626da0c8062dafa90f6ba534ee5736ae3cb7776a1259bb6c1795b4fb748021c04d315da7ad2401524fa7149e56105d20f85d75d6a0320fb79ab032e07ff09d2b4056ae379537086786a69f7ac7ed48884d739979a2130ffc7e2bf5279006226e60e93881b0c4365d5f71ab9d6d3c6636fccca96eea35ca34f5873e8c176993c61b02d613d9a7ae2ab2a3c597a440f8e14bdcd14d0a8904d386479c6e86f988d69d79de38174d7a0a3a7ff5ced9437592c1ec763f0a615c4f6c55b50273a8f7d9c829be528f808b2c083e958bb947e420fed72ea25783c2a8bd6708f01f461f675f31703190d338f926621e087ebc9270dba069391630484bb6591e7a605b1fb66fc4c5ea331577709d9ef684c3f594afebf9c6abbc9bf468ec1f43d110add3a4c75e2498d10f4553bb19c9dc7d1ad10b4133aeb1cfde9caf48b1a9f2e23e4e708ebb59e7329d56442010d5432a7dbfb9fa209d441e20cbe895683f7fccac4e86acb2741bf985c119d777a5fee85a40ca35de377075dd58a1769bd46f2f150a6f9493dc4b69bcfc50512094407d5c77265d60fabd3a33bc4079c25dfa9dc88b93b8a850d00ef76a8af239313e239c316c095d9bd93e86487cc0e78b12a69f489424c395eba540d7cca2767b8c8a1b7f6c2f4f4487462d94091481b96d0abf3c3bcec359648a58337cd9c0850c519238ecc3e295930222f39761217852fdeab4777fb0fb45cde96141d02ebfb753b3fcdb9abc1311c652558689fadb461023b9add216380ddc65e04d15ddb8d1a6fd0437590058d6e8718f94f2b453056c4077439e959a0b30f145cbfd59f60a1fc8aeb3f359822d63b7e9507026657d0a991022269be9a471cec9db543a9d2ed7035a8b3e231d8675b5f2d9af8c72197e0a1a8efc9285e4947630a8498a3a2a7f8d3603cd09697d7e78739600840113301b87b77d0c9890f4439a42e6183d24e8e550d8075222f3e41df4e8b5e860c245460b925541df4c9d74e3a8ed6b84f84e0dd64561ce3280206f74cd54e00392f61ee29b6f06621d2ff45847acda195ead03a18718a01063ed8f2cb9c4762e0c05d969d666a21aade07d2d2e1756ef5196737d7563f6f006a62938ce968630325f4a8dc504580ea392517f5ec41f86948ef444b78400b890919f0d9eb41ecdd718c5656369c932e9a9206bb5f711bdd2c2ffb052e308ceb13b793cfc251bd457653e7f1d77b943b642db2886ef66ab28739f48fb1bed47a53f6537b6fb970baedcaba721e963bcef96ba09adf27868f03450155cc1aa4454c33025785af37d1d69cefdc4be26f19c1ad4bc94a7d5c72b91f0d481d81b50b6b0c02b2faa26980ad0376cfd8a7b6d1b79a637cc5f5ae6491c851041708db2542af6165a44c1dbb40e597d6ad83d199c3c1cbfc5ede82080ef6d4440fb6ac39d51eb34d10a09d4b62738975a3069711f5b581a1ef3f6b552a937457334027b583329f9ed15a26996f1de07a139f9e195467ef6da451112bb4edfb7bd1449e054d1265b94df7e8c9053ca30137bdd6543e9c41be75e3a2b1e6a51b22845fe5d340c9db8ccd66f63babc76763003df4e9b9a9dba0d2ae4d3280b611919da8bca0a099861b181caadbb4c2c4c1b1254fa230a20b34d94b369b1abe0e200224239a460264ffb62467ed530ab93b3f15cb6754609fb22d150fd9ce51781f11d4053545403252dbb0d53d2c5a112fa1dc1bfc1857a9c806a47546f0d2bc2ab21a802e2d16b7fe658d274655337140cd4f67146ca5a9e60e47eec5a42445c4a7442ba9814b0b3bf49eefb519b7625c24c93fab8e1ec2d1bea472ebc9c77109eac535c563d4f40cf0754b8fa98b5c99bb5134e19cd17d1e6599a9bb7a4c72469706c7a0104ba4b4abb48a408d9317a27c377671049296e076ef8dd3994f55248b38c4152d3167edf5d8d4630f8d42818ca60ac3db139cccf23c6c1fa2e3aecda26f3e6f4c5d36b50945a17327398261e72e82f5c5c88f626d0075e3baf91e3d11ccbe48bc218be676b618b827710434cca552ce3c5ccdc460c1f1840d4e1fe77bbbf0df1ee8305213ea6a763da6435f8ab61f6962f7d8a15936635c6710e9d2ee86466ff26bc30971875f5301bb44dac0edd97999dda19715fc1c2a8b56993d5b7184a3477f0d2f953619c552840081a7165dfd56cd1445b95111a8d4170f8fddd9c49aa780c1bd8418252fef308759b19196ed5fc741ba02aed9dd480a9f73a286768780fe37115a8344fa9102132fca68a08b71ec4803832dcc993761e7175918715b8fb7efb781142af04722b4f83b125ab9caaed3571d512dff0673d475c1b45b8df66ab26e2718c5cb2d836dc26d308892c73bcaeb161a61666112a553b68523d0083b71cd6a55d98b205dfa55eae810ece50deff1ca19680f6d42939884b278a39817d99b3b670dad5b74a120257095ba88ea8912f0511ceb2c4f47e1084756cff2e912f0cdf412182f2be29b082e288701fda09c44b8127a110feb570ef4881f8bfedd57bb7dd97f354491c84326d8d913d7312a44951fd816da932265bc5ba33d992feff68e8e3df2e546a15bf9d5dcf24158c852096f25f2ab6b496431cfc40417b5b74739e53f10c94b6cb3099ae32d2ae435594948e91ee6c6ca73f61221d67d284c9272e2d650a9ce1bd088c3ff6a42999e5c03fff4c7c83c9fbd60e7be8ecebbd3cc68e0d78a631d8fc70695e85f738917f7c0c44007afc9f4c934e0a8ee7be0669fa06afef978b5219b2cf62862af2bf8bcf82962da7582858eaefd4e2e4cfbe5daae8c778cafc4203e8f7643c724d4cbd79776a080fa32439f63dfe207bfaf8258a1d44414aeb13f0f8b3d2c88825b700143e7cd114d68f457b676e4a89dd417526d7049eb2544a7fc61c2b47c49b33e29ad01e6bd453c0d8443f5f7b144394514bf1b4d8e6a2a2dd88525ce9b164a792669eae54edcc82537a259c848b55aca4fb16c60d147863c273dbb59a1a5aedba363547085a9f6a6de47bce2522a5a797b730e9b7d1f787dd0c1e378fefac2e19da41bb6fd50399be5a5236b803c001db68123ef354f11fe31545e3775d088ce72a63628d219d6b0163d8e16e69684e3ab3cbb65422adf946d69c05285267f73946c39a260e0901e4a0c7875e04266bd0ce7e860958f7dbd97e968c7fcf194193708ad92fb611595d49a1d7cbe7992fbe49d62a433eebcaf8417f6971dc2aab5acca084566ca0267b4336b4567fa5fb5c5dadf182b0b9353ec68935bf2988fae20ca6cdd8c7ebdc95a65055acc55e4ee95275a5d5b6e75517e29fe7ee23a5729a6319a379cd65b32653f4528b7be07087d38721a112177c04350296bc5e9519f82622b7d70bc9e8520af5d37487f0d5a498cd299b5177249cdb710c0c993549f1e8b5b25661041de2a3c7521021edac9602bd21eac44019585cb7215bcd8f4622715b7269aa098863ff128525f3b87cff867d556f22d7689c9b110bb41dacbee2ce425da4c18e5439a8f8b96cfbd6311e687429a4c2efc60a70e0be2c889e0b2c10cdcb028c21f2b1e7fa7e786a8d5507217d027f608f0dcac6a727ce037818abcb8ed6a43fdd375d464b0d5130e394a6617c901be2bfb9d94aa6bcdf493f30cadef4da99dad812202e9b6c198ee7e5a4cbd31f97d40aefc58d0b8cc7f9121bc761bc7db479da204b54e0bf63e81ccbfdb8a75bee65e155abda26bcdbb032e084c54f583677a25cf76ba44d1f9a9f0a3fcf2ac0692b5649ae6e363c980fbbd27075b639feee114f68dc3aed21502e8795e29d8e99f903e1a635ffb10474c9801235b1120eb74693937ef93cadb07a344138386986e10dcbfb3eb4aca07fe072b335cd85af0e8c444c176a372d5ac5437613b7fa2f9c486c6158df88a81929f00b6024e3ffa75cae205ca798c1ec8a7a743f4fc11ff4ab0508f6cb71db80f7757f6a840b231ccc9071a2a816903752b2cc7782e2f95139240ef94b745fb8271dda6afba29f25e3a459a1d205c105b40ffe4965fd3290b5b290b6ba1a3c32cf7a562ea403d5a82e67386764d7736029d0659e8bffbc9f44d361cabe529c8d9477979d3cfdc88f8b5c99e18e7c3c80ac8f3e32b7d209eface02381a16376a8948216e69d03885508eceffec4e302f65ea424e51a8cefe544293107c32811c6c2c8eaae86165bfeac2a349a878a2ce4e451539a57522526344bc99614b59a42ca735b63ef0f7550ca5fd6f01229339054850a815e69d726322920be2377d163a3b62c2bc50e5b33b92b0f28abefaa96c6bff2c9810ea840c1b50ad87e03665132acebd0b1b96b297c0f041a7bf06594fdf7fbfdc0f32dfa84682b83ad5d333cf534810fd527a487a572cc07b3b86f36e945854e93a0648eebed153a5ffe8d6010e020cc14688a5483679a8b353384c988d79cd331236364b6f82ee08e33daec79d59cf3752f3f9ad7a119add80f8280213ad8132e57df874865a73f9e6dc67bb1776e320c50ace102cc0ebeedbaf25d8e394eea0534d89244cd79fb8b8cdd14122605e163ce06ca058f7d12c727112e92bf80920a747c3c5458055a56623b5fc56917a3f38dcac7822cb76ee3344f3a4c0a438624593bcb9978ce0c2dab39ef63c5fac1ba5c58e9769b055aab44c7ffea3898c9b95f085e155f610ed9af637316d8f5a3db90c6eed4543304142cb4e18574e42339389a79f4784db9c61c704506b12cc9826f02ba3fd18095bbdbb7f8806b48390905c3edf307cbab8f5bd29826f5a5a9329347c13d0c4abdd320ea18da851f708e345c36598b5e65fc11b37c3e084121de543f30f4279bd7f61f6a2c9f464d1fd66e8178bee59b652138c8a99efba4d3b6cd7cc32ba206794460737a8bb0c0d3303ee062949383c9d92aedc2d8e468f2eddbdd06fa7d35ded2ffec06e577c490e01f6e4a9d675a3c6464b4a6a52a5dbc90d2030799ed3a93d793e3e7ee039bce76fc7c77a8a6ad58d259dce4bd63f0e089acaf43b8897792ef30a2979388aa144ea9429c12a7a2c983bd0b89c7d4e71fe0145db4894afae999059448c46a734cf600b6fa3a9eea48baaf6e7e54e0d8d433af8864d8ca685fe2faadc5cb11328b335a9635e35f8fa30c8c3e5bafac970e4864387d19022f769b39f2985819bf27b8dad3097648e5c9c03a711dc4c555d129fa5dd9455ea5da5662a5b1733a0502150c4ec49920ab49342a5b6061215522467af527eb8aec4e1e906eb2ef244938731b5c68b140dc6577d2c0845bac7cd53cba9364ca2e1eb8fc5ef3759975b89916513f93ff285dc311adec66db826a39c01fba45ecb714324be7e4d6e07e3e8c1470594c6c402cd9019d0e945e5c36a81e22de7e44b7659b13c4b76b1e0c4ef614613ff3113184031ecc44b4be99690de35474472c90b96af095eb9d494867f1945c51b10d8ea5514bd46459b2dc0e66d9c1c83826f20cce7d09eabb899866fc2e6e7b21dda7d7960b1be9108ac5d3ece88b440cd0e9ba3be8d38b28944876506d50c34edd7a100825fead09714dbc9ab77ec8a85daa4cf9f5741bf791a9e98f09c473525193176cf6c7a7ac62a003887117c68e9619b56624eb23dccbaa5a5e270968e82eb7367ba9f12995a795ce7bccbbdc9975fbfeaf8662ea9b097b1c0b0a99f1edef28941bc9b0da317edb9697ed568134bb9aff54e27cda8bac28a141a74198782b871d356b149183d18552f459913385ee73ba7139741899441f3066e7ff857212c8813ec500878f4f86fe3bd1f1683971461057020bd32a2c822a4a2d529f11af87cd1ecea53b90c8a704f7c49764ea9f47227ce42fbc535d4eaa8462563870dfd44bde2759eea81f7978f0a9ddb233ab543ac7c6adb37d9934da21962b2856b473b23ef8f45d52fd7c675665ca044d98d763aa0eba477273e49ab39b6d79034648f206a964f370d8697e1d3f91284c1dbaf3f967a38c72bd942c37e2074daaed26bdc1f26347d28963b8a2c2608781eb5d2dd1b59c8981ae67bc86559fc553e15ac5bee9f87faf615f4c46056872364b9502eb7d6f624e6c83ddaca33c1b1b5466e3347f3edc3cad024be7bc9d69840317d53cc6dac681a71bbec50fb6f9e4c6cad93244faf87345c1f56d207a644fa130807d9cb97620050720158d11856761ce0a2104ee72aeac96bcea6ae7988cc9c3ba1806b37b1c0e063318671ee4d12acc20241af2c31ab093f6c9a741d57d2844705ea3dec40cb46d708c51e8d0c3652f5758940b6171170342be760a7255e76ddda3d3e392a69b656dfbb3b77c11db3d28af7e7313fa4e824a747464a69ff552167010931f7c083f65ac8bbab306f3f451fe1451b41638908115c326141e93a862a5957d8cdb1affb325f286ae64fcfc6653d062a5fbcf6b0273051e4822fd2d54ba3305ef11594aef560a78bac4c96202f9b2241bc4ee700b4fc46acab1340acd0820a21ba8e6076072f12485973b3a937f2df06f6e1675978a81ec4f6fe0c47a5f942f9502ef62ccff0612675378364b4a2e76ebf5fc9b9e0e6b0f4641016123ec9ede7a1ed74dd8632c0360c313e6f9252c98364da260fa8daa9ba3d244e53d5a99338c083ae1f9ddc82db4e745a983365f2a6e1493b2a9427eba21420975865a6467358df3414e7010161c22ddb48cab480e745a4e9f5d329318a11b59feba0cde3ac67149f806adcaadd5857441313ec9fe3b3ef6802f0e893dee5e5a2dbc18abc7cf4d4b12b21840ec7dc89146e65a9af2d08a57825619eff7d3463c5fa6740d18d418df6a1e9de17e228e6bf034fd1f2775c77ad7672ee733c5d77ebc5c699c3e97d9591ba7ee571114b8d8f1ccbf6c6775a40b9eaa23d278a670f4690b481bb7721ed5d3fced2a463f30c9a583645814def6623ca8d2677848b3e97b21c8ba90c55778d948424b872a9ba8e595a32b7b1a272022359400958864dbe922bf00f319de6960260a43a3806a9d1d17825492a7d2ca2f4e1a582d7d5517c6271fefd64b731bb3c836540421831113978b49d615e224af2cb858a8a2e5e597cd935fc42a836081b8c55077e9cce77923d5ffa255770540c1aeefa02afdcae49fd41d8e0befac670d81f75a00538eb28650230d38e6518ed02822b34165366fe9b93e2c996befc57d09d06b09af83640f25e72112239b2ade9202871e18e1826044903ea37e07e084f3e99a39b8ccd0bb70bb5055cf69da306a156b2fa7603a97613df94290a3bfc39da981dda26d5bbddbabc0b24189d746020c72693c5e1d60b669472538415192b24a223d1215ec74d4edd555b3c784280cac15385fa575eeb5454623012f819426b9862dc49e6e684fb06f61305300eba8f69212602f187dabb1ea959634972f542cc081f58b63105596dacb470fbac233459a4523e43400356ac3f5ed2ffd1359bbb86cb5cbdfbdfa2b9511cce45a0f6260f34a2db124d4bc088bab8f58fe1e8adba38870a64d1afffe8ca29fa255a98c3b189c0ac8150debb7599b2c279ffee13e3fd51e1ac31b32c8b386e70b4df71021728662ad3e71ee60ae925c1ca2d8a93fd70d925912c02a43cc7d9aff36ef0d30d8f994e689e866388a9ea0e21bf370569233c1ed479531540d839a12f9d8b2947dc7190213cfcaf480d991aca87527812e01d52d921a7fdddf0fa00fa98079e510fabccf7156101284aeaece6e72801ec0ce115071345b1dbbeb2f9fd9a4679f5ff7222da9b78406228e360350ee15ef36c3dc06b27cd5c08fe1f7d2dc6997cd75736a70ad2bcbe65b31442158fc0dba7035ed087ad72cb085eb150f659114ef431c479fee9ebded44737a2d0a655206e05ee74bc8a7284faf5d75bfa61976b758f9a036cd6c09d54900be536a8cfe905c9bad1e5fa056c1cd3bc0dc5457568ae024bab6e7567af6f236e669c31247880b3e6edcd1137190b525979cde50c74a6ad4d777f9e6ddb84fbb2a010cb8e668312b87476dd90b747170ef2eb344162398f86a30d700d45eed79735f8f03a91e9e2c4b7e1138b7eb07a374bb8a3a77afa047e2578dd7abbe815d1681949c6a141fc8c78c8ae2116168541889ffd888eb4d682f4be8d27154604b8eef62764ee97c02647dea856345b864180d4a52fa88597321f96669e51de6c82248658fb4b90a888957e48118a03c0ff9c84a64a823f3cfdb62f7301d73d4861a97a48b4b9b1c07bab6083e4f2d4e74c77b18b35ce519418dffc8745813e446920ceefa4637384e8503472303e4a1910f79159ed298d57f7fe21f950a1ab6ba6abef0ad130ef696f09973e1821008bf1a417926723bd238f092b08d1cfd3b457e96ba682c6bd2da7b2491f8e56a5bee5e7fab98f3ff053cf49c54589165109e988f2c948255f8b6122d4c09c987e4d584c057a0251ba500da8aefff98667e63bf1694347a4ebc32a0f517b71a773c1c5c4d70a1cd420eb3af5074f11b9b000836347c6f2f1a1f0f5576e11a277fd8fa5d88c8150bccb09504784cb579e31f4a10c08371d429892ea0b414e647c42d86d7cbc9de75c4b4c657faadf5949d4feade683bca8269f105204c96524dd85e0425f33c0b2baa923e35646e8c4571bb857718692ea392a8f548407c9d34e8f4db196e7585c8bcaaa3bf332f120a5e16e5b26775225942cec288faba4c459005cccad04f049d572b3e35df3830cfc68483ed25a7cb2d539aba84b939d9ddcb5bb10424b031208565721148919acd2f6a1a41c90ca928509ab25b543cab1a5ea0d17aede6831f637ab36df984c600bbbecb3f48d29f28305a13ddab9d61904e8c16009d675b7ee52393a999dbf5706a33661e6905570afe6e95fa1d2980668d0cf037ea789292c71389402d77b57814f94c5aec8b7133a9f8fc1316b104a0818794069bfbfa2174706c862e8bbfa5c92143086c6734f3948d7b53e2ddbe57fcf16774dd41c3b5d0d12050091f08a7ad23edf3886a8bf4a7acf7bb1fead1d2fed5d393c16b64b7fc05caefafa961ba1ab017247efe293ed24433faa3b447b3466e0fadfccc1e454d11a924802ad7c01a161f636e5b9b9fb95ee6f53d1d875d1e3b4cff06d903b1469528ba4c2d92ecc112edbef21ff66859d3ea76586c957f6ec079935667de42fed01a957ae947c5d0190b8f6a9bfa9215fa6a4de0db06d6097bd90db86f45dafa694aa68d39b95ecc930aadbb0694c651bf9eb83b91c15fcc5891e6ca02f9570f3b62314f76bbe5762ba47f647efbe88b7e25b78c36403d5dea7d0cb18cb18dd9a9d3870316496a1fe447ab9acf7549dda711619ee6a637e1e57e91790d357601473cccc7d4f85a5705289cf14c70ded5e02797322346887fa78175bc9d7557a53cb16f08d564b5f148e59416333f8d412ba67f0495f125e7a188e2ed5d73edf3999c2ea89949e502304c77e9c74f87375232f6bbd277b01e1e3c13a07a864532f7944b63ca62f919a3b36468347c965a3cdd6836ea627ae19c2c5c3477e7b313fd921ea56a76f4955473e10979c12011c058144fc72fd7ca9de3dbdf6f3851bd542f4a8610abcc5b8d69ffb4849c9974b4ed03e0671685b97d972f5dec27192cc4d0e74ad65ff0cae69a5bf2732b49f1c296b66efa90198548a69266e79d5f623feb1f3b5337fcfb2929c6df50b5e1e7ec877e2465a698f635e5e512f54e5a6c7151aa3d9457106a4804e897d01834e597415af6483a8666473d121584df37f15e20540ee79c5b81cb026e012ed11e50a250c7200c76e53d864e808f1154b3feadb1d50bc33bba472ba9f44a2251077b6fec7e0b66f046d76aa52ab8ad7c1f5957a33b15c47a24d40c12c47d2b6e2ef22ab3b435359d60ceed3775cfcdeb799c252b8c1297a57c2af8c1aa5a5db6baf746f836d2ed1dbc62a40270ae28be0f32bae5d93e278749eeea0151377a0ff1b0a4496d670e6ec908a78c6fd8b735e22f9c6f39317253d898a73c8a4e545581ed163a2953df55ceb1447af0c3d0b629190c5711a0b6bf613391d7112d607ab359cd8ccbfb412a4077d536e135252baf4a329315b8dec3732b01e2a0eca6bca01a0b298c3cfef32369fc2eceea9027276f48c890d0b12eb1b10bc7a191116c6bb61715ad8b4e25f945ffd8b3fab2bbabc8232954de6a7695ca8531e850055a325a0f0f4fbbb1fb1ca0c6bd22027f98534fb83bb45204c1484bff069677298b52ff80eed55e5c4df9cc5581ce62f282146ba49abb8999eb8fa9b3814da90e5a2ca442a42f2203bd8c1eb2dbaf08ce4baa549374a0d01cd220edaf1ceb37fdaff56165b1a1acb6d7a6682afda1cbbdc041e944efad38ca07886dbb0bf4a3554e8f1e0c05a52493ec3575c40370023607687e8035e093cad3ea222526836a84f1c7ea7221a6d9cf8e8afe166cb68065b13707891713dca60d85cde1d4ea65d1bfa0643836737ccf647df1c330408d14c0e864ebf374629befbe0a0358214216d919e906ff378b60cbb4f9589d2d892f70cfaaa1365000c24a21236fc5b804b094a3974fa24eb984026dcbaf6a44de9e60c7a3acba4de312c26665a4ae54f31ab47eea901232fd8c8a278f89121b1a56607db120d5fdbdfbb7cec5cec383fc3411d2b7bb6bbac8ff7f2915f734115ffdc259da5617aff35dbd04b8c7a625d159d5c71941118007c062a98a92d9d598b41d094d05a0c76626daacb27bef7bcc3aecb26b9df824e2d52bd575a430dbc18fceeab44a99173dc910172d366f5eceb9f1ffae77b708cdb186368f2495d4ab28932482cf4b60ce60197c740068a330905761db50f67f214b70162c5950ada29bb3ee3dd47268e5d0a7fd242d4e7e95e295adff9f144653b86aa10284f41bf2f83ff22541189fed4ac2fe45d069cb8d03e2ca9c376d32922b03c2f65951fade3060dfd62a645a2d7df72e6eae4f57ea9b3f7bd2cc38f74cd7362c63947399e41b4223c6b321e2e32b3e3c33562aa32d87c21794c7cd604be2f5fdcd9e82be36b8dfd9f6e11049253f9549ae46e08416b9301d69e9a6d361ee7a5ecb76eaa8a56aac247f55f56485c808aea9912950fe24061d8a3cdaff23b31fa701344a526e4f4f5756055881bece64d488f6f2d9ea1cbc732d587abc1bfa562ec908e6772c1a634592231787249fd174e5ab10ccd25b1ef5893371f716a50682a771a13361f0d141a6cafe2e4a29d3ded1384ef402f12ad2fb427996fbd2051cc1289d50b59c4a142d347fa81127a28cc628085e9fe4c0296547e8f16f7bd4c015b186ea303f3bea53b44a4ad99fb0d0a3cb44b6cc9dd0c4170c9ee12a91fae8f29eeedd6bab84a366c5409b933b954030bbb5b5afbe342b29c5eaac43aedf3794d183b4d39d566cb8", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008380)="f7709f77945ec10b4eecea480cce6641402373da5e6d7f24014f7acee96be0135b59ce90b463223252169e036a4daf3dae250a1e6de526211d43d9512ae526730f553268794994fd54868ec480d09862b687b463a8fc5058903593b9bb4d50879635cbf67a9e7d1110fa0e8ef89dbd2abdae33183737b8c0b907f5cc74ad6ab0383f8240e091417d2816317f40abb64224f616136f93d932f2223ef42fa3c3155d53075d3eb1db73beb32bc364e3fc246d3dcaca2dc91a634815412bae915cdb1a6da7884559403b545235541ddac97d7b1ea8135539ebcfac1edfa2fee8cf78bb46da7644a8f9e42ae06ca7a188b83fa537b0962a10411b67fc4d7dfe9e95cce2aef82e75f4680b8ff9976b6569523b72a86bd3a8c96f30e85812fe33a610c2be0a3c1063e2ee864c6e8bbf331f2768accfea78700a7321e4af2db46fd162457e439369da2217992b77502b9b958df27bc086369963793854d7f8b00c537de3216898b8f2c1dd925049eef1ab57bb6f63b2d88850b49b3c54d71f545afafa16bd2d06ae501344987623890fdf9ac04b179d2131070a34cf143697b6642bf5da67437aaf5e78e7e6be85e44ad7b265d78d2baf92ee5ccb0a452eb32fb3fdd1a41abf3a68086acd20458af55c086f77c30bbbce4c19542f92ab1e68393ffa58b140586b49761aacdf6aeb7682561f01e0869f503c4a161fd405046d3e6523bd4071c09b7516e4e784f4d11706f1c2eb170e735e563c43317a5a9afad28511163cdb63660beb699f7b8a7eaf57d48517974ffa766fe8deab0cfb11562b9c281bce2493d08c40a259e0325c52124e303064c6fbae2826355e531543863030fef484621a381a945b6ec7253e20047e7294bd069442f72672e6dfe1ca17d75d8c6b16c931438cec72e6ee53f3db89a10a38a93cc84c7393773461db5074b4f5060dd0a04a069a7a9b078856a3fa1786fc8dab621ba622acafd0781b523ea097283afb0c59222a316c6ddc0554bcaccc70288e524ed7719fc02a86283b57690a7320af028efbaedd5bd158a9dc9ea8e4f53c7da7566cdbdd4f4d9f01a9dfa6251a355e338efc8eee258add8731c7d22161482b7e3c8bc83f30482f9935fcc5974d9d0685b5fba3b07d7f85cc8fef18ac4e8e915b8476bb44d7384c996921ae40a4fdd2dd2a70ba17e1c2d6ec67b8f7b45568c105d52afa9c82bdc1dc7fd951b1e4fc1212bf29231d8e41ed4dacafec9a823a672dceeee0e4048b5620373c53ab8f3553c842a5a6d914f8334d6d8a4af785f418e6b4aab3965f94ca9d80a74a5a034fb6edd0322696aa1060d82c7b104983f8889026819ffdf3d45c604e53066b03dfae13fad499e3894120c10944eaf752989daee4e172decca9c2b324a817a7c787e6bc59fc2884e358a1a9b14b3704cabe374d23c002b8112be68f409302d3dad0a4c02105cb54c4350c24e6f3b7588bf1c28ae321eaebb930cf0c3b607acff20663eab8a593320c518eba8f9205350f11a9c1530115f7e00f2aa335c92e1305ffcfeac7cdecd6f1b6a33710ec77ce428484712d66bad137b6c8da5aa51d1b7196d981a14a40df8406b292f385cb149cfc0a86701566674e089b88487f34fdb0bf16ca94d9da4a837f15d5cf8f11d9c226844d3eb18d848420f344a3992772125319abb641ea56f03fc626f092f67a8b6716b29cf8585cf5fe25a35f5dab0e3e075ba3c84116fb6cbbf99a8153d179ffc1e64356f1fa0bca6823ebd8e1a176636962cff271cee5c5bafcb68fad4921e070c4ae08cd8fa0b94534f11e66403d129a5e8253bd3a9dc09a8189895819ff618532bf6743b17a243d515e63868bdf9287fd1bad0d525759953624c8e82debf88159b2c22945535d9379c911f89c7856be1438bd02df70c939b80741ddad245082a72556a2ab3c2390b84c17b6119103a0b8126dbc55e05b153ef9a12cc67f649c14160c698a7127b39fe88fb91d19b2a381c08114c6e3e6d3d42b77602c838c421a9a414f1eb182d0197ff67dcfb5d79404afbdf9c96f475a0d5afc9a4d7cdad458eed6b1de6c13b11c46004243db779e7ad6dbbf15e69ee34bd2524cf72e49a5352992a9251a86c3dc30d7d5fe61ae538928e8fdca0e04fdb5917523d8266b7b4f1679a5082e798f587c5ed9084c70965e94e12f643ab0191e606c2eb0c3359a2b8504f3bb2e721cfbcfdd90c31cde10992c9400273bbc45fe5ba34d7ede773036e2fd1fec1f001c495accdf8ff572de3eb2aeebad29acfe3d2b1448fd67368d0c37f8bfbbf09bafc8f99a44b187f4f443c82b21f66f722fb59f40ce0f9d83c52b9b3358a80e102b21795a1cfcb986c787ccbb9f9c96c2b66d2f7a94ef2c2a5b65d5c2970ba6f3107609f4a67432835c2ce1682d260f6826072a6b6d4b113a5b06311677ca01260f3567ff1ab6be13b455f93916906273c5430fcccb57e0d78224ebec422763ee3a6b94528749a7ee5f70c9036cf3a99a9c98abc0e8aec18733a0c7da76814f2ff741582a9d96eb798426065764fcf86e40b6490f545494b48749fa8d398c5938d6bc7dbe183deecb913ef4c61aef27ea6bb77c23af09c3dec453f01d8e0cf1a3df30d73d44c4e147d9ff2853cb05b1d9fcd2d80815016f65368c477f3e8b676ee1ef5b9154850f02951060f5335d7b8b1c395151b443130d27b4aa0cdd9c1badc38e1825cbaea22480e1d8a986b001a4464fea618707f43bdf7949f500f3f9293b7f7f28170d45eb3e9422d7a107d5dfab18b8e7a2cbc4b42a818384136a49a021721fe07dff4fb2f26e74ee6b5725166409d794c69a1a5b27cb6263c387b81612add3c9e9e509845843a6ffb2250d37c365e3f57f0ad6e908fab119211e7679b41c8e298f9e85558be25ec0a4e6c9aa3d523ef3771971bfd272fcb736d10fa98a87b78c532fcc322f5e24baa21f2a3c84a90ec9b546869400bad19dec3575ebc69c8e512210b81667ed3cede89d10ee5871a6fb166b2f5c96f079cd5bf97f41327930b210627106c4cb6d77e3793b808c425b8a4118bbaa2d1a1454b162cf9886ec17e215d12223a65348ab33185861ab1f3166a4a925d25a63def895a5b01deea11bcaf17c79d27a922834a32aa0f8676793c7257e44d3f7768de19292a385a7a4b3fc992abfb9f8f3ada57b83dc7955c0b2edef1a8214dd8ea2cc9679685137dd63f3918020e2e2f38602005a4a6e84422867b9160f65e92e053d0b58191eadcd5a8a69b18e3216ea63df3f31869c81de88fc75a1d9e15cbdf8d68ba50cd8dfa55259aa362c2615ccab13489844d5ed995383e334074f561a4a67e1060e64a818fc96135d34e604cabe3d9195cf1283725c7700e397ecb72fc8b36f38cd0830b19b439101e4b3839c48ddc95367bff87b888407a517f94fbe58a7033db1123c0a0074c730e34ce821e12f43d84d3b4f0310c6ecd8afe7779671d7b825bb3892825c762b86f0ffd182b6aafd477fadf0c7a931cb61e2b05fc11267bf0a9882e7c2f8e84d3480d9e4576cc03f0e1dbfbef9f66840ad37e76da3ff8a419730a0076de67e9b913f03f5b637287d981eafa1223feafb86bcff5b2ce987f6fa8386ee036a3f75fe014ef90b05a744e038c43766b5fd552e66b9b4996f774988d2a70fa0bf05fbc453cc4fd0ab642db1bc71e1b63919f3c49254f177306f9b00af5782c0633d68ecb85f93fc1afd8dee3dd1ca8b0d7ba0ea463de0b6e3e05c080f832e129cec16853923cf15f06d9a38e20a5a6fa5125d03c1b72680547eafd9fdf246af08dcb4d4d746577478fbc72d7a36bb4bd3b5ba4dc5e407babfcd64b8c413d7dd5433d6a4ee17d5b4835a74c81414a9397d73e15ae387f04a5012a37c88b226207aba933d68a67bcd38f5e0fb8b24c4434c3a0109deaef4f9ab1d230ea6a4acd6db0c3962d0de3bb64e33a29af8dcbf39d48a27c1649a66d4aecdce2db60c50bcec31677559369184608db197f2ebed81ca8fbeb9d2f8c486ec9839e765df69ea634f2815e75eac613febfa26012767c28eae207ed9315bf19c42de9602f44f45a9cb9913a67548787a30c9e56f3399ab281c537751a28d98392655a60ceb9f2515772d2f1d5d2843952312e2a59061b60f128def6795e0c8eb7b12a710c1afacc84f498a29d683d1949c17f3aeeb8b9a32eb10bb242d61a2db5902d592224fb8e1e713ef33caaec6f8516333ca4886345555166e91a6469d67f39241d144c6457c0f74c60e662439281a660b3c802eafa5825fab36b764d4753b33920dc72ec4b7136be556c7d0d528eef67049f5a7bd9cc7e4e94a4874ad8d06595ed38a5f1cafff1018c1351d1d7eab144edba6d4f9eeb7924a25b9f7a3eb20984919d9ade66a18c33f92b65031472ca657a724d86053a3fc60fc5502acec81822bc609954e402a406081cfe7931a1adbfc45a3168e30a451561302a131ff702b4d6c5d3603ea9d1b54c64aad93407e078d6b435154236ba594e8d2f798bbdface489b43120bc0bd7e1bcb6658c2c192ccf18f278e9c5bb14dbdf1a4eb3412f9dc64a31abefd79bd7c91bb7297c9f694840a75cae5d3482d15a2d148092a6545972b7f95a23206bda509260bb370a012b744c2bb46b57da12367d35e778b7d7f463fd8230368b5a5636f28e2cddd03c69adc9c913027a726130c95d818fa38ca7ba8421d3fcf0736cd3001ffcf80701cf6d737cc3dd8f905af39fb2806d2f22289d0001c74eb482f4faf0a1863099cc1b236edd1cfa206b21a2ed86affb4e6a3a4dfb54fab46c8c06cd3e370b50e08e1b7a08864269d867eba5fae8a49560e9479209966002c09719ab8ca58702bfb0071d3859df0193a956ed4d8ad19a2c79656c6dd42eb5a44b808df394333683b605ad0cf176bfcfdc89b01317a802cf0ab02fc3673822b55fcfba512792c9e40a150cfae4dcd40b2b12296ba95063a2f50f552b4682c4d461b1efb7555816b5b836ff0319af6935ae5b41e67329a7b21da93c36fcd87cbba1653c0d00077b14cfcba24f891d62219c157b6354300837d211fbcf1881f5e98d6195fb782479e106c072020b56285107e2fd7947bc64ec9a43a0b239c140ec0456685ac3eba988952e641d2eb16cd0132d2bb25576fc6bcd5e29eb9da2d40e8b50776abe5cd7ea45da8442a311977c51755015b3e4995739edef0567a3f169e980addb1705224175372339de904eb952e13f648449722258fa21f7e53f4a1956e8e9a39dbb18c6d2d10d9146358158a0ab7ce3f54120b705e1ccb7a13fb7e9103d0b80faaac31cab07f6d2d9f668c707b5e3bdf259923a1057816a31e8c771267fd974193d90e1a9837a987d9ba52f7af599c1aeed13f6619cc0b334396b750c9017f84cff56c0dfecc12faee59e37cf7d44575bb448abb19616d4fa79f4fdf96631328dd0d0717f12b9587d76b577bbe78eaa7b0acace3b79776b5d2e77942c57745e347ec766170e90cc66a5191bff3ad49d423ba2817cf92be74e653cc6274a20bade324638d57a27f2fea01d4670bc1ad5ec4d006492ff5fa616a0010be824766f12acec9b26a7606cc8453382c3dd1f5f5c85354569123824002c44d0ae4cd2e1ebb4e33e3d7b69fe14e05fb53af9d66f53990a830120cd618cfaa10e5f6deab4ef4522afd380ea52f90b181fd5b538f424900aac643d118c33dbb6ffe0b2428844f51943412d8fda4a327b71c814cd6345b3690a4716f04fc7323ff1af08e82ef5e571c9fb0fa9b22af40948febda32ea14ecf61700eb02967d09bfd078ace6cea259952c0be90fab1ce841f1022d2da82f173c580d43effdb424b1729aa9fe40292c082043a7c901bc76426ef6e3de788db31e50f54458ca4e360bb803b48d5a4be50724c1f48b504b086d9dca3ae74eae76a1849d14a4074f389aba805b793f9662f072405026afc3ef108ede69dbd2c769886dfc75a9a2e093137d92b38e34a050eca73cd3067d56dfd58fedaff2857e720b09d676607a1e8eeeb06b26494cc2b844f5e856271732477f384af839e98889d5c9cc28651f6eb74029f839150f947d180e48776ef1c829509e12016c6d1b717713e6325751a944cd259b1b86b1f5e793cdb55a73784498be09c2cebdd70159c77abc7c64af2e2de1a860a3e9dd8646b7a6866e1891fcf97a2b3ea47c0c57c5fa9a94129c2e27940ab9fe996eb1813d21d48fb6dbc9b8071c50dc26b4ed21588211fc5edb1ca873c70b606678ae7de9c10d2d083f372421a3038c592a38aec69020862f4432ef9ae7f400ed53b44bb58e92b022ac8b62a6b459337af339dc3346a809b715f9974d21e606244d23cf4dcb0956f93c14047243172adc97a1fed868bc49fb57ecc123425a21e94dd5b9d1ff52bc45965a7be2f5ea8218750e2cc8f174fbd2c7811742f5f17fa1f954b8423c403fd2e4e96296e37e0bfe2edd52e8c3b921dac771c61524455b401017ab5f655eca76139557a4a87cc30210b052ae17a5ca8b634322657ea4d87e0da2392c470f8951ac0560a01b4d0befe632ee311d0b87af31465d6cf7854f5738cb5debfa1d7381c74f45eea08c06d4ddc9e811d1a33394a35efdb7121cdf5f1603343df8431c87718a5d4cf3b2e593508d8b63f0d1e82f9ebc40d4022ba06327cc8233f29c0995da512b318bfa212e9582cb880d9bd6a02050a014294ef321bb2c65e4638a4fd2c8c27fd9ac28c9e49cdae6dd9eb05dafb38a4a003a56dba826e386f5fd3ab0d54b92f53ec11c850927fc4c5b669c67505ce59306ad86460b480b711d4b31c512829b7037d1c45b5b84c0be40a038b5e975c57c860476318a22df2e4f90009c38481e519b9511e54dc59e89a6593bc53ae03224466513930c5ed3689793f00be192a58a919db9ad1267962c0ee60327ee710accb0da037610ef8aaff63f6582f691096fbdfb1996abc4443cd4ffe04fcad3608413044b978d86d3a18bdf86fdb70cf7e7bbb0e4db9d36176d0ba8a4cf81369fa84ee55466df70e6d4431a873000c19bb5caff30c01c7f7f928cde86bea5c401e525fb8a938fd016bffd5c9d52b279e867bc64f575b80eec74e7f66fe92aef613636e50c8f32831ab4b7eabbc89ce6d7bbfd03b6b005e0c5ba27268369f5083b2ded32c1f9e8cd73a1daee26cf03dbbf9c476fd0f14935244eb7b544f8db1c19d8a21de7e8a88f540e8949f721f20d7a47cfad3f52d93c11a796fbe9fbe415194193e5c70b33237f70790905816b856c252a30e72c081a8bac6a1c9fd2c372b9f870831d6ba6671fd8684f25e60cc7e3a1a02ed5f1a4fe426373bf61404a68571e93f35659b6c37f939233ca6663603b053c8fc74da84dd971b9319a1260fa2f5d66609962e93f7f33a40b22066b86a74fb38bf1444d025f27f14e922661471ef8ad503e97f8e7dd6b9c9a420885e519e085a1f26f7149b82881908021f601679f79c944549bcb431a7d2b12f75aa54cae39f9caafefc01e7eb589d2eb574937abbe18b419d7d27309acb330293456337cb9d753e08f7b890bbf76c4d6ef548bc3b5965302bc65ab08a2420527c1ad8be374cae7cc858376219d39a7a6d58c478a721678e789bcc317a4d1acbf47870a4802a07ac0332f7fdad7156065de511862c2a076e264138b98e7abd1a2555ef2e1ca44ee68f06725508891051f6bd24479a616606024841c8203744b999868b9f2b3b5e8a42f454d25fcddf8f5569594716a4022c3ac8ba67115b93d8bb50684b0fb100dabca7f6b7e29b723007776435829c6f21223d7a2556766d198c76ab6cce3b6e6da5c4d14a26b7cda1cebe6792ce4c1498fe644fb4408189e472efde923506ea4d18aa3284ec311fa942dfa5d8b939e509a10c69461993cc9d3ace2fef29afee8d0894764ffd82371d5ed363b5968447ad3c0962b86584cc97740d7bc3838ab1c1b0198ea830f122b200722d3c2c8815a2a5f90382e1c58f2348dbd38449e28c67ed85f66ea3e383b91c782a4e77ad4aa538db6d15ab90dd464318ded6fd293a1b0279852335e3c94bcce6f37950fb23d96f84465aeaa8fc2f71ce61a1416e579399c363bb37ded602fbea1ba5de87ab12bc7aeb5c62f026f648ab2babea2517c3ade2828109da58c010e6efef544088ba412ea57d3cd4fad3fd85b17e386ffc8a700664b2604c8a71c011e894ac03a109d9ddbe0b6d625d33d7d16fba5bcbc1ee1cdcfc6a475a23aff414e5b4f83e9d18e10f9e6dc49e518561ad53a110794d2ad9c7fee95a03b632b2acbebac42c996e1b856b2f18a2a3bf7cb0726c10b6aa3ec2d78bebd26e86ecf78b87736017cffa7d654b357be120985c553d11dbc932139ea6e1efdb7ef34598db568e66d42429e414b5903ad6e616ff7faff6ecedec529cf16b280c18dd4c3c8cd5192f625965e15c29104855364565a4a52ac5ff78eb31a6e7602e84226a87364708c2a9fdcf2f66f5dd0951aacb7b6c8f9bd0e534ae44b47799cdb8f683db5a3258d6f1943e04e59b11fbc6f57d16ff150c94a22717c1b483ad064c25f09022cc4ce09e76fed2b2ce84e9a50623f84cb013d00b8ee3fd2eaf1ed84df2b29d3119865f5df8fbb6d7440ec6da33deff5c60f466f91959c0d7c7800937cf59fdc6e2d53e809a6f6754ed545fc71c42a95d198df6329a3f32ecd091e7e643727ee34241b9244ea9a2118ccc6d5b52f8dbd61dbc7a4b65e8a4b0e937669a8a6377022df74ac0d2d42008edfa83a71c2e14c8cb7f3e54612cbe5b64b31371f445ea6235467b339b285bffaad0acd9af5159b84f58a3e0230a7e6f055a016a0737b893e0d1b2dba11de53529c825bea86a455bba90eb4f10ea5425d498c18c0bc643a5bb07491a8b6d89b1c92329aaff3a9cb9302f81100d97b78a09d1f5c512c26409796608b77c969c070f6e55037c97bef2c30ebb373110c2356e0663c0a7010d13f18f9b7b1d4a5de88b110efe433a5dc9dd03ac7621a6de39584de91e9b43c5ef4cb435eeb45b8865540355030acddeaf451a453a0b0a76cb064ea1e939dc5491f2c591973c741cf1f73ef4451a1b43ed9d9e0c7b126b869e7cd326900a470dc08a15fb176346f7431dadd6b820ec10cba33d7097ebac9c1ff147fe39d9cedad2828facd8c37cb22a8b7d55b63170f55ccf45fc25715d00e7eb7c3f32c5a7dce02bb07073daa170caa4813b2102648cf6a5bc9ae5ef3fc4c6240447190340469cea21650f79f5ff0ab60e6fa8a30a45f29ca7f4356c275ef4dad63b07f73cc672d26091db75eff3e19b51272b0b786609333f6580a3ad3c83673df3776d04cd05fa86b7b8066076b71377580d8b226d9daec174cf2a62ffd48259ca04821e949021b3f540b5268c794a5314de9cb143dafce0575c06750f0c125b507bf39bf0abfc25b9bc39ddbc4450f0f3a70c312905a5c2d11f7b39a3cb0fd08be6f8b74c5d74fdfb0477c942caac42ae596e0aa36db5f10e1571231ebfc327e5a6111eb2f2a0e1be0b0752018973500f1b7c832cf36078c24717f66983bb72649829af53389e89694bce146f8cb358d7922ba07dfa9da6fbd65b7f5159010b1bc6847967b9eeef7c6db90f48b1c1a7ab63481809111b2876c73c375064bdca8064ee8d6d7b3817db8f5dc82709c586afea5850f415ca7641b5e6f45ff93b9dbc2f62c40c47dbe61a069d88e3664c8dfc9be2b35f8896e6d5c8a35b864b50d50364d3cec828a4f7dcff3cb314c9f7ab03c93e1fd8c5bfa2c303d76cb0954b401927a000babc400497d3f3a37c1f7a685ecc12b28db4b9b75debccfb132a4bb3b19ba91a441a94403eef6ad8222edd1dcecf215580296020731cab55029a189561499d34faef21eadfc370f98872c2192aef73f0cdf80de61cc9157d1e08d7153a49f7d1151fb9f110febc34e760c1afb87eb36c9df1d6aa047cb655b3ec5fdae8e2d93861070f98bd5f1c53c26f07d7c43cb295440af75e87671a552e39f9bfe1853222eb8ba0c8013944ee61dbe21281b1d4e3ea3dc0353d4ded5db0128504b97491353120c63bea1c5656be047a77bebe93efbab10375cb0946624e076a93a6ffdc284f4aa9fcf54ebda3653d5abf7da76f19c165d0982d48279ba8ee9f33b2fb060491aa26517e39f2cb4d4ce7726b249f070aeefca6843a813026e45c6ddfccd1e0b8883a7170644c43b227a2a3c03cbd17b8f3dc0910685169ada487a72251eeb6e6a1dd5661294337cf4cee2d74fdfbe00ff6d07847e63880059bcd12951e8b649cca1dc6a355a7d2c26ef8cabd467b21d6bbe28b108b385ffff7304d96b03500c912efd2af7c45f81f5f2f0e3357ec7da616f81ead2f823a128696ec7dd65a6587e5ecb56a8fba1bdea28909da5e085e164b046310182fad711d4e46abaa61281c88c729810c615ce9636b5c96e4150e2fcec6c111469ba8b0c010963d4338fba8a8a080e384198e1410af15f7ee18e5396b721fc331860e072207da236b35dd94fa7dab288a114ea46e754f1d0b4bfa1a5b216706652e52c489e9a3a1cee8ab4fe5d416ac22c2649673715909c27f31684f6e103913bfd28e02fca507940b86405cebb8084d1c6532a5508b716070c67ba544a1593895f4cc1a8d075415feb69d50fb674c3a89b59f80032cdfa8d1181856817bb16f50bafd0e21aa656661bf3b6bfc207a7a645a8edc15ff1cb706b6292a3263ef5ad1479338f59058d08ce76dc801d8e11e280badd5a0c0dcf1c6285d95cc087e7f0dd823b6b7c353d22f1e7ed03c1461cc4c170e33cd06c45f17fe1af233cca638611449493d533f701d77163f6784202d995e17b797d4d2f0d87d05a00728e8fdda47c70ecf919a2a110371da3474580720e8eae934888cf84f1f1a5530baf815e7c16129732ec4af417c1be0970b845dbced563f00a86135bda35c525aa020f285116b00071858e6eacf7b124b635ff7b62410e8c27a4c76adcdec10f5180130e8c554d2d8038677650171a2f6c3da4c04e340b48df92cf41d08a499f680a2cd6ab099fcede2f8b1888aa052c7f2dffdb203e19fb1e2e6237e19b218740c89cce311ff168437500a6eec570780938c3291a19482656a8d53b19bde3d4148bf1a9f2ea67ae835df675662f27b5b6f5e2652d0471c81740acef306d9605b4ca09a2c4c0f3f8063b6fa5fe01109c5e348eb318074785771ab2cedc48d0f5e15b3a368ace5aea415aa2d566063f25571b7a218b9e95117aaf0a389284e763e448c88b49205392fe032ed206ca8e27fb1c65a72d125cc860913dabe714be1a2a85120066cad66d53dec9a30664bfdd33e25398199211b15fe0770cb243bee320e95e506be4617c3e5e6825342c769bc1da3127f8d34c922f60ed2727f5d9209fc28099ec86c29572fc7159f6ced79b0a2a2653100230a55f7a578e2f1d90f6301069ed04106de45b976f2aabe769ed17d59a53116b74fa2f598c0d1e9919ca8d9cc21265ebc218ab9808b094eebd9a48d8349cf3faeaaa7c8ddb07f6eb874f70cdfafe050de69c6e7da6c8d2f71d581d6c604f4bb29243e9d1bbcb0890b436cb43d1a33c4b96a08af4137135a8c8fe74034dcaf1581856f800771", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3552.488782][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3552.501975][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3552.567451][T16466] IPVS: ftp: loaded support on port[0] = 21 [ 3552.706620][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3552.717900][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3552.825639][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3552.837008][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3552.885961][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3552.897129][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3552.928546][T16490] fuse: Bad value for 'fd' [ 3552.978421][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3552.989573][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3553.041633][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3553.052908][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3553.123324][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3553.134551][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3553.151845][T16451] ldm_validate_partition_table(): Disk read failed. [ 3553.164009][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3553.175139][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3553.197049][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3553.208209][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 3553.218875][T16451] Dev loop7: unable to read RDB block 0 [ 3553.229722][T16451] loop7: unable to read partition table [ 3553.236035][T16451] loop_reread_partitions: partition scan of loop7 (̑%2xZ?h2~*2l:QGJR BH) failed (rc=-5) [ 3554.042646][T16466] IPVS: ftp: loaded support on port[0] = 21 13:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1409, 0x9f6f4799e9511ad9}, 0x10}}, 0x0) 13:49:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x11, [{@in=@dev, @in=@private, @in6=@private2, @in6=@private2}]}]}, 0xa0}}, 0x0) 13:49:01 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x3, 0x81) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) 13:49:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x3, 0x81) sendmsg$unix(r0, &(0x7f0000002580)={&(0x7f0000000000), 0x6e, 0x0}, 0x0) 13:49:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001340)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS]}, 0x84}}, 0x0) 13:49:01 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 3554.650169][T16529] IPVS: ftp: loaded support on port[0] = 21 13:49:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x40) 13:49:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80000101005, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000001c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x5c5064) r4 = socket$inet6(0xa, 0x3, 0xc8) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)='\x00!', 0x2}], 0x1, 0x0, 0x0) 13:49:01 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 3555.425810][T16563] ===================================================== [ 3555.431141][T16563] BUG: KMSAN: uninit-value in xfrm_state_find+0x1d65/0x7970 [ 3555.435234][T16563] CPU: 0 PID: 16563 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 3555.435234][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3555.435234][T16563] Call Trace: [ 3555.435234][T16563] dump_stack+0x21c/0x280 [ 3555.435234][T16563] kmsan_report+0xfb/0x1e0 [ 3555.435234][T16563] __msan_warning+0x5f/0xa0 [ 3555.435234][T16563] xfrm_state_find+0x1d65/0x7970 [ 3555.435234][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.435234][T16563] ? __msan_get_context_state+0x9/0x20 [ 3555.435234][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.435234][T16563] xfrm_resolve_and_create_bundle+0xcee/0x5700 [ 3555.435234][T16563] ? idle_cpu+0x9a/0x1d0 [ 3555.435234][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.435234][T16563] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3555.435234][T16563] ? xfrm_expand_policies+0x9e6/0xcc0 [ 3555.435234][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.435234][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.435234][T16563] xfrm_lookup_with_ifid+0x59a/0x4780 [ 3555.435234][T16563] xfrm_lookup_route+0x100/0x3a0 [ 3555.435234][T16563] ip6_dst_lookup_flow+0x223/0x270 [ 3555.435234][T16563] rawv6_sendmsg+0x2155/0x46a0 [ 3555.435234][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.435234][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.435234][T16563] ? compat_rawv6_ioctl+0x130/0x130 [ 3555.435234][T16563] inet_sendmsg+0x15b/0x1d0 [ 3555.435234][T16563] ____sys_sendmsg+0xcfc/0x12f0 [ 3555.435234][T16563] ? inet_send_prepare+0x6b0/0x6b0 [ 3555.435234][T16563] __sys_sendmmsg+0xa89/0x1070 [ 3555.435234][T16563] ? kmsan_internal_check_memory+0xb1/0x520 [ 3555.435234][T16563] ? should_fail+0x72/0x9e0 [ 3555.435234][T16563] ? _copy_to_user+0x1d2/0x270 [ 3555.435234][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.435234][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.435234][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.435234][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.435234][T16563] __se_sys_sendmmsg+0xbd/0xe0 [ 3555.435234][T16563] __x64_sys_sendmmsg+0x56/0x70 [ 3555.435234][T16563] do_syscall_64+0x9f/0x140 [ 3555.435234][T16563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3555.435234][T16563] RIP: 0033:0x45e219 [ 3555.435234][T16563] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3555.435234][T16563] RSP: 002b:00007f3117503c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3555.435234][T16563] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 3555.435234][T16563] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000004 [ 3555.435234][T16563] RBP: 000000000119bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 3555.435234][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3555.435234][T16563] R13: 00000000016afb5f R14: 00007f31175049c0 R15: 000000000119bf8c [ 3555.435234][T16563] [ 3555.435234][T16563] Local variable ----tmp.i.i@xfrm_resolve_and_create_bundle created at: [ 3555.435234][T16563] xfrm_resolve_and_create_bundle+0x554/0x5700 [ 3555.435234][T16563] xfrm_resolve_and_create_bundle+0x554/0x5700 [ 3555.435234][T16563] ===================================================== [ 3555.435234][T16563] Disabling lock debugging due to kernel taint [ 3555.753258][T16563] Kernel panic - not syncing: panic_on_warn set ... [ 3555.753258][T16563] CPU: 0 PID: 16563 Comm: syz-executor.0 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 3555.753258][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3555.753258][T16563] Call Trace: [ 3555.753258][T16563] dump_stack+0x21c/0x280 [ 3555.753258][T16563] panic+0x4c6/0xea7 [ 3555.753258][T16563] ? add_taint+0x17c/0x210 [ 3555.753258][T16563] kmsan_report+0x1de/0x1e0 [ 3555.753258][T16563] __msan_warning+0x5f/0xa0 [ 3555.753258][T16563] xfrm_state_find+0x1d65/0x7970 [ 3555.753258][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.753258][T16563] ? __msan_get_context_state+0x9/0x20 [ 3555.753258][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.753258][T16563] xfrm_resolve_and_create_bundle+0xcee/0x5700 [ 3555.753258][T16563] ? idle_cpu+0x9a/0x1d0 [ 3555.753258][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.753258][T16563] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 3555.753258][T16563] ? xfrm_expand_policies+0x9e6/0xcc0 [ 3555.753258][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.753258][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.753258][T16563] xfrm_lookup_with_ifid+0x59a/0x4780 [ 3555.753258][T16563] xfrm_lookup_route+0x100/0x3a0 [ 3555.753258][T16563] ip6_dst_lookup_flow+0x223/0x270 [ 3555.753258][T16563] rawv6_sendmsg+0x2155/0x46a0 [ 3555.753258][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.753258][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.753258][T16563] ? compat_rawv6_ioctl+0x130/0x130 [ 3555.753258][T16563] inet_sendmsg+0x15b/0x1d0 [ 3555.753258][T16563] ____sys_sendmsg+0xcfc/0x12f0 [ 3555.753258][T16563] ? inet_send_prepare+0x6b0/0x6b0 [ 3555.753258][T16563] __sys_sendmmsg+0xa89/0x1070 [ 3555.753258][T16563] ? kmsan_internal_check_memory+0xb1/0x520 [ 3555.753258][T16563] ? should_fail+0x72/0x9e0 [ 3555.753258][T16563] ? _copy_to_user+0x1d2/0x270 [ 3555.753258][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.753258][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.753258][T16563] ? kmsan_get_metadata+0x116/0x180 [ 3555.753258][T16563] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 3555.753258][T16563] __se_sys_sendmmsg+0xbd/0xe0 [ 3555.753258][T16563] __x64_sys_sendmmsg+0x56/0x70 [ 3555.753258][T16563] do_syscall_64+0x9f/0x140 [ 3555.753258][T16563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3555.753258][T16563] RIP: 0033:0x45e219 [ 3555.753258][T16563] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3555.753258][T16563] RSP: 002b:00007f3117503c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3555.753258][T16563] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 3555.753258][T16563] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000004 [ 3555.753258][T16563] RBP: 000000000119bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 3555.753258][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3555.753258][T16563] R13: 00000000016afb5f R14: 00007f31175049c0 R15: 000000000119bf8c [ 3555.753258][T16563] Kernel Offset: disabled [ 3555.753258][T16563] Rebooting in 86400 seconds..