san_get_shadow_origin_ptr+0x84/0xb0 [ 1132.467020][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1132.472220][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.478406][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.484564][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.489768][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.494625][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.499154][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.505476][T23321] RIP: 0023:0xf7fe7549 [ 1132.509552][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1132.529185][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1132.537693][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1132.545666][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1132.553636][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1132.561600][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1132.569571][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1132.577545][T23321] Uninit was stored to memory at: [ 1132.582685][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1132.588402][T23321] __msan_chain_origin+0x57/0xa0 [ 1132.593341][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1132.598470][T23321] get_compat_msghdr+0x108/0x2b0 [ 1132.603408][T23321] do_recvmmsg+0xdaf/0x2300 [ 1132.607933][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1132.612612][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.618795][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.624959][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.630225][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.635084][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.639595][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.645915][T23321] [ 1132.648237][T23321] Uninit was stored to memory at: [ 1132.653267][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1132.658986][T23321] __msan_chain_origin+0x57/0xa0 [ 1132.663927][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1132.669038][T23321] get_compat_msghdr+0x108/0x2b0 [ 1132.673978][T23321] do_recvmmsg+0xdaf/0x2300 [ 1132.678482][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1132.683163][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.689254][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.695410][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.700611][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.705466][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.709973][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.716289][T23321] [ 1132.718608][T23321] Uninit was stored to memory at: [ 1132.723633][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1132.729412][T23321] __msan_chain_origin+0x57/0xa0 [ 1132.734351][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1132.739464][T23321] get_compat_msghdr+0x108/0x2b0 [ 1132.744403][T23321] do_recvmmsg+0xdaf/0x2300 [ 1132.748917][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1132.753595][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.759739][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.765902][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.771101][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.775952][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.780512][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.786856][T23321] [ 1132.789175][T23321] Uninit was stored to memory at: [ 1132.794202][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1132.799925][T23321] __msan_chain_origin+0x57/0xa0 [ 1132.804860][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1132.809976][T23321] get_compat_msghdr+0x108/0x2b0 [ 1132.814921][T23321] do_recvmmsg+0xdaf/0x2300 [ 1132.819425][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1132.824107][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.830175][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.836331][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.841531][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.846384][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.850893][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.857210][T23321] [ 1132.859533][T23321] Uninit was stored to memory at: [ 1132.864557][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1132.870408][T23321] __msan_chain_origin+0x57/0xa0 [ 1132.875357][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1132.880478][T23321] get_compat_msghdr+0x108/0x2b0 [ 1132.885420][T23321] do_recvmmsg+0xdaf/0x2300 [ 1132.889927][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1132.894619][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.900692][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.906856][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.912062][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.916915][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.921423][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.927745][T23321] [ 1132.930073][T23321] Uninit was stored to memory at: [ 1132.935101][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1132.940843][T23321] __msan_chain_origin+0x57/0xa0 [ 1132.945781][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1132.950899][T23321] get_compat_msghdr+0x108/0x2b0 [ 1132.955839][T23321] do_recvmmsg+0xdaf/0x2300 [ 1132.960348][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1132.965028][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.971100][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.977254][T23321] __do_fast_syscall_32+0x102/0x160 [ 1132.982474][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1132.987324][T23321] do_SYSENTER_32+0x73/0x90 [ 1132.991830][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.998144][T23321] [ 1133.000488][T23321] Uninit was stored to memory at: [ 1133.005515][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1133.011234][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.016173][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.021284][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.026222][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.030724][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.035405][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.041497][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.047653][T23321] __do_fast_syscall_32+0x102/0x160 [ 1133.052850][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1133.057702][T23321] do_SYSENTER_32+0x73/0x90 [ 1133.062208][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.068520][T23321] [ 1133.070840][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1133.077512][T23321] do_recvmmsg+0xbc/0x2300 [ 1133.081926][T23321] do_recvmmsg+0xbc/0x2300 [ 1133.418950][T23321] not chained 790000 origins [ 1133.423595][T23321] CPU: 1 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1133.432565][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.442614][T23321] Call Trace: [ 1133.445911][T23321] dump_stack+0x21c/0x280 [ 1133.450243][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1133.455968][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1133.461169][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1133.466980][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1133.473050][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1133.478247][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1133.483919][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1133.490002][T23321] ? _copy_from_user+0x1fd/0x300 [ 1133.494948][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1133.500143][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.505087][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.510204][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.515142][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.519650][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1133.524848][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1133.530742][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1133.535968][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1133.541601][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1133.546888][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1133.551657][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.556336][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1133.562159][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1133.567362][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.573446][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.579631][T23321] __do_fast_syscall_32+0x102/0x160 [ 1133.584833][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1133.589687][T23321] do_SYSENTER_32+0x73/0x90 [ 1133.594193][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.600511][T23321] RIP: 0023:0xf7fe7549 [ 1133.604701][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1133.624305][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1133.632721][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1133.640694][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1133.648672][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1133.656639][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1133.664739][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1133.672705][T23321] Uninit was stored to memory at: [ 1133.677731][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1133.683454][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.688389][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.693495][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.698438][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.702944][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.707621][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.713687][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.719899][T23321] __do_fast_syscall_32+0x102/0x160 [ 1133.725102][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1133.729956][T23321] do_SYSENTER_32+0x73/0x90 [ 1133.734461][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.740778][T23321] [ 1133.743094][T23321] Uninit was stored to memory at: [ 1133.748119][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1133.753885][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.758821][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.763939][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.768895][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.773401][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.778084][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.784240][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.790481][T23321] __do_fast_syscall_32+0x102/0x160 [ 1133.795695][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1133.800698][T23321] do_SYSENTER_32+0x73/0x90 [ 1133.805200][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.811506][T23321] [ 1133.813824][T23321] Uninit was stored to memory at: [ 1133.818854][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1133.824591][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.829618][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.834732][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.839784][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.844288][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.848986][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.855063][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.861222][T23321] __do_fast_syscall_32+0x102/0x160 [ 1133.866439][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1133.871297][T23321] do_SYSENTER_32+0x73/0x90 [ 1133.875807][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.882121][T23321] [ 1133.884441][T23321] Uninit was stored to memory at: [ 1133.889471][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1133.895188][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.900128][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.905240][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.910178][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.914683][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.919363][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.925437][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.931635][T23321] __do_fast_syscall_32+0x102/0x160 [ 1133.936837][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1133.941688][T23321] do_SYSENTER_32+0x73/0x90 [ 1133.946307][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.952695][T23321] [ 1133.955036][T23321] Uninit was stored to memory at: [ 1133.960063][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1133.965785][T23321] __msan_chain_origin+0x57/0xa0 [ 1133.970723][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1133.975841][T23321] get_compat_msghdr+0x108/0x2b0 [ 1133.980782][T23321] do_recvmmsg+0xdaf/0x2300 [ 1133.985288][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1133.989979][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.996045][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.002219][T23321] __do_fast_syscall_32+0x102/0x160 [ 1134.007453][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1134.012313][T23321] do_SYSENTER_32+0x73/0x90 [ 1134.016819][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.023132][T23321] [ 1134.025470][T23321] Uninit was stored to memory at: [ 1134.030519][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1134.036234][T23321] __msan_chain_origin+0x57/0xa0 [ 1134.041172][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1134.046280][T23321] get_compat_msghdr+0x108/0x2b0 [ 1134.051218][T23321] do_recvmmsg+0xdaf/0x2300 [ 1134.055720][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1134.060399][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.066471][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.072626][T23321] __do_fast_syscall_32+0x102/0x160 [ 1134.077892][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1134.082743][T23321] do_SYSENTER_32+0x73/0x90 [ 1134.087292][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.093604][T23321] [ 1134.095924][T23321] Uninit was stored to memory at: [ 1134.100955][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1134.106672][T23321] __msan_chain_origin+0x57/0xa0 [ 1134.111608][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1134.116720][T23321] get_compat_msghdr+0x108/0x2b0 [ 1134.121658][T23321] do_recvmmsg+0xdaf/0x2300 [ 1134.126161][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1134.130843][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.136912][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.143071][T23321] __do_fast_syscall_32+0x102/0x160 [ 1134.148270][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1134.153120][T23321] do_SYSENTER_32+0x73/0x90 [ 1134.157628][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.163943][T23321] [ 1134.166263][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1134.172936][T23321] do_recvmmsg+0xbc/0x2300 [ 1134.177362][T23321] do_recvmmsg+0xbc/0x2300 [ 1134.422951][T23317] not chained 800000 origins [ 1134.427593][T23317] CPU: 0 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1134.436345][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.446396][T23317] Call Trace: [ 1134.449711][T23317] dump_stack+0x21c/0x280 [ 1134.454036][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1134.459776][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1134.465052][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1134.470850][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1134.476917][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1134.482121][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1134.487768][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1134.493937][T23317] ? _copy_from_user+0x1fd/0x300 [ 1134.498862][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1134.504054][T23317] __msan_chain_origin+0x57/0xa0 [ 1134.509007][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1134.514109][T23317] get_compat_msghdr+0x108/0x2b0 [ 1134.519038][T23317] do_recvmmsg+0xdaf/0x2300 [ 1134.523548][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1134.529632][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1134.534818][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1134.540711][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1134.545899][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1134.551540][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1134.556829][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1134.561597][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1134.566265][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1134.572075][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1134.577264][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.583320][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.589480][T23317] __do_fast_syscall_32+0x102/0x160 [ 1134.594666][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1134.599507][T23317] do_SYSENTER_32+0x73/0x90 [ 1134.604002][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.610311][T23317] RIP: 0023:0xf7fe7549 [ 1134.614474][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1134.634067][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1134.642469][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1134.650430][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.658391][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.666348][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1134.674305][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.682264][T23317] Uninit was stored to memory at: [ 1134.687274][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1134.692979][T23317] __msan_chain_origin+0x57/0xa0 [ 1134.697905][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1134.703011][T23317] get_compat_msghdr+0x108/0x2b0 [ 1134.707940][T23317] do_recvmmsg+0xdaf/0x2300 [ 1134.712430][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1134.717095][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.723148][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.729290][T23317] __do_fast_syscall_32+0x102/0x160 [ 1134.734477][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1134.739317][T23317] do_SYSENTER_32+0x73/0x90 [ 1134.743811][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.750113][T23317] [ 1134.752454][T23317] Uninit was stored to memory at: [ 1134.757483][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1134.763204][T23317] __msan_chain_origin+0x57/0xa0 [ 1134.768130][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1134.773225][T23317] get_compat_msghdr+0x108/0x2b0 [ 1134.778148][T23317] do_recvmmsg+0xdaf/0x2300 [ 1134.782640][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1134.787305][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.793380][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.799524][T23317] __do_fast_syscall_32+0x102/0x160 [ 1134.804713][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1134.809553][T23317] do_SYSENTER_32+0x73/0x90 [ 1134.814046][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.820366][T23317] [ 1134.822674][T23317] Uninit was stored to memory at: [ 1134.827685][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1134.833391][T23317] __msan_chain_origin+0x57/0xa0 [ 1134.838316][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1134.843414][T23317] get_compat_msghdr+0x108/0x2b0 [ 1134.848340][T23317] do_recvmmsg+0xdaf/0x2300 [ 1134.852829][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1134.857494][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.863547][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.869691][T23317] __do_fast_syscall_32+0x102/0x160 [ 1134.874880][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1134.879852][T23317] do_SYSENTER_32+0x73/0x90 [ 1134.884350][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.890657][T23317] [ 1134.892970][T23317] Uninit was stored to memory at: [ 1134.897989][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1134.903703][T23317] __msan_chain_origin+0x57/0xa0 [ 1134.908635][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1134.913738][T23317] get_compat_msghdr+0x108/0x2b0 [ 1134.918670][T23317] do_recvmmsg+0xdaf/0x2300 [ 1134.923165][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1134.927833][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.933896][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.940060][T23317] __do_fast_syscall_32+0x102/0x160 [ 1134.945376][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1134.950219][T23317] do_SYSENTER_32+0x73/0x90 [ 1134.954712][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.961016][T23317] [ 1134.963326][T23317] Uninit was stored to memory at: [ 1134.968340][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1134.974044][T23317] __msan_chain_origin+0x57/0xa0 [ 1134.979079][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1134.984299][T23317] get_compat_msghdr+0x108/0x2b0 [ 1134.989223][T23317] do_recvmmsg+0xdaf/0x2300 [ 1134.993711][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1134.998398][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.004454][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.010622][T23317] __do_fast_syscall_32+0x102/0x160 [ 1135.015822][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1135.020765][T23317] do_SYSENTER_32+0x73/0x90 [ 1135.025259][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.031664][T23317] [ 1135.033990][T23317] Uninit was stored to memory at: [ 1135.039017][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1135.044722][T23317] __msan_chain_origin+0x57/0xa0 [ 1135.049645][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1135.054741][T23317] get_compat_msghdr+0x108/0x2b0 [ 1135.059667][T23317] do_recvmmsg+0xdaf/0x2300 [ 1135.064156][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1135.068822][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.074878][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.081019][T23317] __do_fast_syscall_32+0x102/0x160 [ 1135.086202][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1135.091039][T23317] do_SYSENTER_32+0x73/0x90 [ 1135.095545][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.101845][T23317] [ 1135.104154][T23317] Uninit was stored to memory at: [ 1135.109166][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1135.114958][T23317] __msan_chain_origin+0x57/0xa0 [ 1135.119881][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1135.124978][T23317] get_compat_msghdr+0x108/0x2b0 [ 1135.129904][T23317] do_recvmmsg+0xdaf/0x2300 [ 1135.134414][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1135.139078][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.145134][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.151308][T23317] __do_fast_syscall_32+0x102/0x160 [ 1135.156647][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1135.161482][T23317] do_SYSENTER_32+0x73/0x90 [ 1135.165996][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.172303][T23317] [ 1135.174615][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1135.181294][T23317] do_recvmmsg+0xbc/0x2300 [ 1135.185713][T23317] do_recvmmsg+0xbc/0x2300 [ 1135.397512][T23321] not chained 810000 origins [ 1135.402149][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1135.410901][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.420955][T23321] Call Trace: [ 1135.424249][T23321] dump_stack+0x21c/0x280 [ 1135.428587][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1135.434315][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1135.439520][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.445325][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1135.451393][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1135.456593][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.462229][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1135.468296][T23321] ? _copy_from_user+0x1fd/0x300 [ 1135.473245][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1135.478442][T23321] __msan_chain_origin+0x57/0xa0 [ 1135.483379][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1135.488523][T23321] get_compat_msghdr+0x108/0x2b0 [ 1135.493466][T23321] do_recvmmsg+0xdaf/0x2300 [ 1135.497978][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1135.503176][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1135.509081][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1135.514280][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.519917][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1135.525215][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1135.529986][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1135.534667][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.540473][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1135.545672][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.551744][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.557903][T23321] __do_fast_syscall_32+0x102/0x160 [ 1135.563108][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1135.567964][T23321] do_SYSENTER_32+0x73/0x90 [ 1135.572470][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.578794][T23321] RIP: 0023:0xf7fe7549 [ 1135.582859][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1135.602462][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1135.610884][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1135.618857][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1135.626829][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.634797][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1135.640816][T23317] not chained 820000 origins [ 1135.642772][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.655295][T23321] Uninit was stored to memory at: [ 1135.655309][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1135.655326][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.660332][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1135.669060][T23317] Call Trace: [ 1135.679224][T23321] __msan_chain_origin+0x57/0xa0 [ 1135.684921][T23317] dump_stack+0x21c/0x280 [ 1135.688192][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1135.693101][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1135.697403][T23321] get_compat_msghdr+0x108/0x2b0 [ 1135.702487][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1135.708195][T23321] do_recvmmsg+0xdaf/0x2300 [ 1135.713115][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.718288][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1135.722770][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1135.728567][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.733213][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1135.739257][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.745305][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.750478][T23321] __do_fast_syscall_32+0x102/0x160 [ 1135.756605][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1135.762222][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1135.767389][T23317] ? _copy_from_user+0x1fd/0x300 [ 1135.773429][T23321] do_SYSENTER_32+0x73/0x90 [ 1135.778248][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1135.783161][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.787633][T23317] __msan_chain_origin+0x57/0xa0 [ 1135.792812][T23321] [ 1135.799240][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1135.804138][T23321] Uninit was stored to memory at: [ 1135.806456][T23317] get_compat_msghdr+0x108/0x2b0 [ 1135.811537][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1135.816535][T23317] do_recvmmsg+0xdaf/0x2300 [ 1135.821445][T23321] __msan_chain_origin+0x57/0xa0 [ 1135.827134][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1135.831610][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1135.836520][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1135.842558][T23321] get_compat_msghdr+0x108/0x2b0 [ 1135.847657][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1135.852827][T23321] do_recvmmsg+0xdaf/0x2300 [ 1135.857736][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1135.863600][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1135.868076][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1135.873427][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.878088][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1135.883698][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.889741][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1135.895019][T23321] __do_fast_syscall_32+0x102/0x160 [ 1135.901146][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1135.905901][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1135.911099][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1135.915763][T23321] do_SYSENTER_32+0x73/0x90 [ 1135.920585][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1135.926367][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.930841][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.935998][T23321] [ 1135.942312][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.948334][T23321] Uninit was stored to memory at: [ 1135.950650][T23317] __do_fast_syscall_32+0x102/0x160 [ 1135.956782][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1135.961794][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1135.966952][T23321] __msan_chain_origin+0x57/0xa0 [ 1135.966976][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1135.972676][T23317] do_SYSENTER_32+0x73/0x90 [ 1135.977607][T23321] get_compat_msghdr+0x108/0x2b0 [ 1135.982521][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.987621][T23321] do_recvmmsg+0xdaf/0x2300 [ 1135.992113][T23317] RIP: 0023:0xf7fe7549 [ 1135.997039][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1136.003338][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1136.007815][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.011848][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 [ 1136.016508][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.036091][T23317] ORIG_RAX: 0000000000000151 [ 1136.042154][T23321] __do_fast_syscall_32+0x102/0x160 [ 1136.048201][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1136.054329][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1136.058971][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1136.064147][T23321] do_SYSENTER_32+0x73/0x90 [ 1136.072084][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.077001][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.085029][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1136.089583][T23321] [ 1136.097535][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.103824][T23321] Uninit was stored to memory at: [ 1136.111769][T23317] Uninit was stored to memory at: [ 1136.114082][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1136.122045][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.127039][T23321] __msan_chain_origin+0x57/0xa0 [ 1136.132033][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.137724][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1136.143414][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.148329][T23321] get_compat_msghdr+0x108/0x2b0 [ 1136.153247][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.158341][T23321] do_recvmmsg+0xdaf/0x2300 [ 1136.163421][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.168329][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1136.173237][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.177712][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.182185][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.186833][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.191482][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.197536][T23321] __do_fast_syscall_32+0x102/0x160 [ 1136.203572][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.209696][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1136.215816][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.220987][T23321] do_SYSENTER_32+0x73/0x90 [ 1136.226156][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.230981][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.235803][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.240263][T23321] [ 1136.244735][T23317] [ 1136.251034][T23321] Uninit was stored to memory at: [ 1136.257328][T23317] Uninit was stored to memory at: [ 1136.259641][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1136.261955][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.266958][T23321] __msan_chain_origin+0x57/0xa0 [ 1136.272150][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.278039][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1136.283733][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.288642][T23321] get_compat_msghdr+0x108/0x2b0 [ 1136.293551][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.298634][T23321] do_recvmmsg+0xdaf/0x2300 [ 1136.303717][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.308643][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1136.313550][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.318039][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.322522][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.327188][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.331839][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.337884][T23321] __do_fast_syscall_32+0x102/0x160 [ 1136.343923][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.350049][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1136.356185][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.361368][T23321] do_SYSENTER_32+0x73/0x90 [ 1136.366539][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.371377][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.376200][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.380661][T23321] [ 1136.385135][T23317] [ 1136.391433][T23321] Uninit was stored to memory at: [ 1136.397741][T23317] Uninit was stored to memory at: [ 1136.400058][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1136.402364][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.407377][T23321] __msan_chain_origin+0x57/0xa0 [ 1136.412385][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.418093][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1136.423783][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.428693][T23321] get_compat_msghdr+0x108/0x2b0 [ 1136.433601][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.438683][T23321] do_recvmmsg+0xdaf/0x2300 [ 1136.443766][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.448673][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1136.453582][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.458057][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.462547][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.467196][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.471844][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.477886][T23321] __do_fast_syscall_32+0x102/0x160 [ 1136.483923][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.490060][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1136.496184][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.501355][T23321] do_SYSENTER_32+0x73/0x90 [ 1136.506524][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.511348][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.516171][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.520631][T23321] [ 1136.525103][T23317] [ 1136.531399][T23321] Uninit was stored to memory at: [ 1136.537693][T23317] Uninit was stored to memory at: [ 1136.540009][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1136.542314][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.547307][T23321] __msan_chain_origin+0x57/0xa0 [ 1136.552317][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.558007][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1136.563696][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.568604][T23321] get_compat_msghdr+0x108/0x2b0 [ 1136.573511][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.578593][T23321] do_recvmmsg+0xdaf/0x2300 [ 1136.583673][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.588596][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1136.593501][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.597977][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.602451][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.607101][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.611765][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.617804][T23321] __do_fast_syscall_32+0x102/0x160 [ 1136.623951][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.630088][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1136.636300][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.641483][T23321] do_SYSENTER_32+0x73/0x90 [ 1136.646680][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.651520][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.656434][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.660896][T23321] [ 1136.665368][T23317] [ 1136.671669][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1136.677965][T23317] Uninit was stored to memory at: [ 1136.680277][T23321] do_recvmmsg+0xbc/0x2300 [ 1136.682581][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.689241][T23321] do_recvmmsg+0xbc/0x2300 [ 1136.694240][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.713669][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.718788][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.723729][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.728240][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.732923][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.738994][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.745140][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.750328][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.755169][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.759666][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.765973][T23317] [ 1136.768286][T23317] Uninit was stored to memory at: [ 1136.773304][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.779011][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.783937][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.789039][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.793979][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.798474][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.803140][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.809197][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.815338][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.820632][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.825477][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.829974][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.836293][T23317] [ 1136.838605][T23317] Uninit was stored to memory at: [ 1136.843623][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1136.849330][T23317] __msan_chain_origin+0x57/0xa0 [ 1136.854254][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1136.859354][T23317] get_compat_msghdr+0x108/0x2b0 [ 1136.864280][T23317] do_recvmmsg+0xdaf/0x2300 [ 1136.868898][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1136.873568][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.879717][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.885868][T23317] __do_fast_syscall_32+0x102/0x160 [ 1136.891063][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1136.895925][T23317] do_SYSENTER_32+0x73/0x90 [ 1136.900426][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.906737][T23317] [ 1136.909054][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1136.915722][T23317] do_recvmmsg+0xbc/0x2300 [ 1136.920215][T23317] do_recvmmsg+0xbc/0x2300 [ 1137.222935][T23317] not chained 830000 origins [ 1137.227589][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1137.236331][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.246370][T23317] Call Trace: [ 1137.249657][T23317] dump_stack+0x21c/0x280 [ 1137.253979][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1137.259715][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1137.264906][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.270701][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1137.276754][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1137.281941][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1137.287567][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1137.293624][T23317] ? _copy_from_user+0x1fd/0x300 [ 1137.298555][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1137.303859][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.308789][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.313894][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.318827][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.323332][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1137.329391][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1137.334577][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1137.340463][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1137.345650][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1137.351291][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1137.356575][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1137.361328][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.366085][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1137.371881][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1137.377072][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.383133][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.389283][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.394493][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.399355][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.403853][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.410165][T23317] RIP: 0023:0xf7fe7549 [ 1137.414224][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1137.433849][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1137.442252][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1137.450211][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1137.458169][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.466130][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1137.474088][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.482132][T23317] Uninit was stored to memory at: [ 1137.487145][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.492848][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.497773][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.502903][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.507933][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.512542][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.517208][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.523262][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.529406][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.534592][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.539446][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.543947][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.550250][T23317] [ 1137.552562][T23317] Uninit was stored to memory at: [ 1137.557577][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.563282][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.568210][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.573308][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.578235][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.582727][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.587396][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.593453][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.599602][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.604790][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.609648][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.614151][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.620460][T23317] [ 1137.622773][T23317] Uninit was stored to memory at: [ 1137.627782][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.633487][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.638411][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.643531][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.648462][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.652955][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.657620][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.663692][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.669836][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.675028][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.679868][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.684358][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.690659][T23317] [ 1137.692968][T23317] Uninit was stored to memory at: [ 1137.697997][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.703710][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.708644][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.713750][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.718683][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.723182][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.727850][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.733912][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.740058][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.745344][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.750187][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.754684][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.760992][T23317] [ 1137.763304][T23317] Uninit was stored to memory at: [ 1137.768317][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.774024][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.778952][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.784054][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.788985][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.793494][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.798159][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.804212][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.810352][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.815539][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.820402][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.824897][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.831214][T23317] [ 1137.833536][T23317] Uninit was stored to memory at: [ 1137.838545][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.844250][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.849292][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.854390][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.859334][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.863842][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.868530][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.874596][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.880751][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.885956][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.890798][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.895306][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.901609][T23317] [ 1137.903921][T23317] Uninit was stored to memory at: [ 1137.908938][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1137.914640][T23317] __msan_chain_origin+0x57/0xa0 [ 1137.919566][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1137.924664][T23317] get_compat_msghdr+0x108/0x2b0 [ 1137.929594][T23317] do_recvmmsg+0xdaf/0x2300 [ 1137.934088][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1137.938756][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.944832][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.951498][T23317] __do_fast_syscall_32+0x102/0x160 [ 1137.956686][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1137.961525][T23317] do_SYSENTER_32+0x73/0x90 [ 1137.966016][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.972320][T23317] [ 1137.974630][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1137.981291][T23317] do_recvmmsg+0xbc/0x2300 [ 1137.985694][T23317] do_recvmmsg+0xbc/0x2300 [ 1138.330610][T23317] not chained 840000 origins [ 1138.335376][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1138.344130][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.354318][T23317] Call Trace: [ 1138.357616][T23317] dump_stack+0x21c/0x280 [ 1138.361951][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1138.367681][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1138.372882][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1138.378695][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1138.384763][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1138.389964][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1138.395603][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1138.401672][T23317] ? _copy_from_user+0x1fd/0x300 [ 1138.406613][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1138.411811][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.416764][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.421883][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.426825][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.431325][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1138.437396][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1138.442618][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1138.448523][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1138.453724][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1138.459360][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1138.464649][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1138.469417][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.474110][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1138.479927][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1138.485135][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.491209][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.497415][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.502617][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1138.507487][T23317] do_SYSENTER_32+0x73/0x90 [ 1138.511997][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.518389][T23317] RIP: 0023:0xf7fe7549 [ 1138.522462][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1138.542156][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1138.550578][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1138.558554][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.566651][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.574647][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1138.582622][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.590597][T23317] Uninit was stored to memory at: [ 1138.595630][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1138.601697][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.606650][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.611760][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.616700][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.621204][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.625888][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.631958][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.638113][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.643333][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1138.648196][T23317] do_SYSENTER_32+0x73/0x90 [ 1138.652701][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.659013][T23317] [ 1138.661342][T23317] Uninit was stored to memory at: [ 1138.666407][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1138.672133][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.677075][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.682189][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.687265][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.691800][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.696482][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.702568][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.708725][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.713966][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1138.718822][T23317] do_SYSENTER_32+0x73/0x90 [ 1138.723355][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.729678][T23317] [ 1138.732000][T23317] Uninit was stored to memory at: [ 1138.737028][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1138.742752][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.747691][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.752801][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.757739][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.762242][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.766975][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.773133][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.779408][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.784643][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1138.789501][T23317] do_SYSENTER_32+0x73/0x90 [ 1138.794016][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.800445][T23317] [ 1138.802873][T23317] Uninit was stored to memory at: [ 1138.807957][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1138.813674][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.818643][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.823756][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.828770][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.833275][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.837957][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.844030][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.850191][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.855397][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1138.860253][T23317] do_SYSENTER_32+0x73/0x90 [ 1138.864761][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.871331][T23317] [ 1138.873659][T23317] Uninit was stored to memory at: [ 1138.878806][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1138.884530][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.889477][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.894616][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.899562][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.904070][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.908751][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.914817][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.921020][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.926220][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1138.931073][T23317] do_SYSENTER_32+0x73/0x90 [ 1138.935585][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1138.942160][T23317] [ 1138.944484][T23317] Uninit was stored to memory at: [ 1138.949533][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1138.955250][T23317] __msan_chain_origin+0x57/0xa0 [ 1138.960208][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1138.965321][T23317] get_compat_msghdr+0x108/0x2b0 [ 1138.970257][T23317] do_recvmmsg+0xdaf/0x2300 [ 1138.974766][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1138.979444][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1138.985622][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1138.991797][T23317] __do_fast_syscall_32+0x102/0x160 [ 1138.996987][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.001829][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.006354][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.012682][T23317] [ 1139.014996][T23317] Uninit was stored to memory at: [ 1139.020040][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.025749][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.030702][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.035800][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.040726][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.045217][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.049884][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.055943][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.062104][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.067294][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.072155][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.076667][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.082971][T23317] [ 1139.085287][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1139.091951][T23317] do_recvmmsg+0xbc/0x2300 [ 1139.096354][T23317] do_recvmmsg+0xbc/0x2300 [ 1139.355015][T23317] not chained 850000 origins [ 1139.359647][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1139.368399][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.378480][T23317] Call Trace: [ 1139.381777][T23317] dump_stack+0x21c/0x280 [ 1139.386110][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1139.391836][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1139.397041][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.402971][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1139.409044][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1139.414239][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1139.419878][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1139.425945][T23317] ? _copy_from_user+0x1fd/0x300 [ 1139.430877][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1139.436115][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.441144][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.446261][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.451198][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.455695][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1139.461753][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1139.466960][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1139.472861][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1139.478047][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1139.483668][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1139.488960][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1139.493716][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.498400][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1139.504201][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1139.509398][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.515462][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.521612][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.526804][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.531646][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.536144][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.542456][T23317] RIP: 0023:0xf7fe7549 [ 1139.546518][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1139.566109][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1139.574512][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1139.582486][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.590536][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.598514][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1139.606475][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.614452][T23317] Uninit was stored to memory at: [ 1139.619468][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.625174][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.630099][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.635213][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.640138][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.644732][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.649408][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.655468][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.661610][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.666795][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.675731][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.680245][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.686567][T23317] [ 1139.688895][T23317] Uninit was stored to memory at: [ 1139.693936][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.699645][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.704574][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.709695][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.714637][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.719160][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.723842][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.729906][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.736059][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.741273][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.746203][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.750697][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.757007][T23317] [ 1139.759409][T23317] Uninit was stored to memory at: [ 1139.764446][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.770152][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.775079][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.780180][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.785129][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.789622][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.794287][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.800365][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.806529][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.811749][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.816591][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.821087][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.827389][T23317] [ 1139.829697][T23317] Uninit was stored to memory at: [ 1139.834711][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.840415][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.845343][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.850441][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.855366][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.859985][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.864651][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.870704][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.876998][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.882195][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.887061][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.891562][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.897903][T23317] [ 1139.900236][T23317] Uninit was stored to memory at: [ 1139.905253][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.910961][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.915892][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.920993][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.925921][T23317] do_recvmmsg+0xdaf/0x2300 [ 1139.930415][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1139.935099][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1139.941177][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1139.947322][T23317] __do_fast_syscall_32+0x102/0x160 [ 1139.952513][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1139.957370][T23317] do_SYSENTER_32+0x73/0x90 [ 1139.961994][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1139.968298][T23317] [ 1139.970607][T23317] Uninit was stored to memory at: [ 1139.975617][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1139.981342][T23317] __msan_chain_origin+0x57/0xa0 [ 1139.986283][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1139.991382][T23317] get_compat_msghdr+0x108/0x2b0 [ 1139.996328][T23317] do_recvmmsg+0xdaf/0x2300 [ 1140.000821][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1140.005490][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.011545][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.017686][T23317] __do_fast_syscall_32+0x102/0x160 [ 1140.022884][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1140.027725][T23317] do_SYSENTER_32+0x73/0x90 [ 1140.032239][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.038540][T23317] [ 1140.040848][T23317] Uninit was stored to memory at: [ 1140.045883][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1140.051605][T23317] __msan_chain_origin+0x57/0xa0 [ 1140.056530][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1140.061626][T23317] get_compat_msghdr+0x108/0x2b0 [ 1140.066552][T23317] do_recvmmsg+0xdaf/0x2300 [ 1140.071044][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1140.075732][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.081805][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.087957][T23317] __do_fast_syscall_32+0x102/0x160 [ 1140.093144][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1140.098009][T23317] do_SYSENTER_32+0x73/0x90 [ 1140.102516][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.108820][T23317] [ 1140.111131][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1140.117791][T23317] do_recvmmsg+0xbc/0x2300 [ 1140.122192][T23317] do_recvmmsg+0xbc/0x2300 [ 1140.332754][T23321] not chained 860000 origins [ 1140.337410][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1140.346170][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.356223][T23321] Call Trace: [ 1140.359530][T23321] dump_stack+0x21c/0x280 [ 1140.363866][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1140.369599][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1140.374803][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.380623][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1140.386705][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1140.391910][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1140.397567][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1140.403666][T23321] ? _copy_from_user+0x1fd/0x300 [ 1140.408608][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1140.413806][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.418750][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.423874][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.428823][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.433335][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1140.438544][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1140.444439][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1140.449641][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1140.455303][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1140.460607][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1140.465376][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.470057][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1140.475863][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1140.481066][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.487144][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.493308][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.498517][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.503381][T23321] do_SYSENTER_32+0x73/0x90 [ 1140.507893][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.514216][T23321] RIP: 0023:0xf7fe7549 [ 1140.518349][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1140.537961][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1140.546382][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1140.554387][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1140.562362][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.570372][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1140.578355][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.586328][T23321] Uninit was stored to memory at: [ 1140.591376][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1140.597094][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.602033][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.607163][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.612105][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.616619][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.621307][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.627386][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.633548][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.638798][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.643653][T23321] do_SYSENTER_32+0x73/0x90 [ 1140.648253][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.654565][T23321] [ 1140.656894][T23321] Uninit was stored to memory at: [ 1140.661937][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1140.667659][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.672598][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.677717][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.682786][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.687480][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.692161][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.698231][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.704439][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.709672][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.714556][T23321] do_SYSENTER_32+0x73/0x90 [ 1140.719158][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.725557][T23321] [ 1140.727877][T23321] Uninit was stored to memory at: [ 1140.732902][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1140.738624][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.743670][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.748785][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.753835][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.758339][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.763030][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.769099][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.775343][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.780545][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.785408][T23321] do_SYSENTER_32+0x73/0x90 [ 1140.790072][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.796410][T23321] [ 1140.798729][T23321] Uninit was stored to memory at: [ 1140.803754][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1140.809501][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.814447][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.819567][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.824507][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.829011][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.833714][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.839787][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.845948][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.851149][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.856003][T23321] do_SYSENTER_32+0x73/0x90 [ 1140.860595][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.867048][T23321] [ 1140.869390][T23321] Uninit was stored to memory at: [ 1140.874421][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1140.880232][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.885175][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.890290][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.895230][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.899734][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.904416][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.910492][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.916663][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.921864][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.926730][T23321] do_SYSENTER_32+0x73/0x90 [ 1140.931240][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1140.937552][T23321] [ 1140.939887][T23321] Uninit was stored to memory at: [ 1140.944918][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1140.950639][T23321] __msan_chain_origin+0x57/0xa0 [ 1140.955579][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1140.960701][T23321] get_compat_msghdr+0x108/0x2b0 [ 1140.965639][T23321] do_recvmmsg+0xdaf/0x2300 [ 1140.970154][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1140.974834][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1140.980901][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1140.987062][T23321] __do_fast_syscall_32+0x102/0x160 [ 1140.992266][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1140.997120][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.001627][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.007939][T23321] [ 1141.010258][T23321] Uninit was stored to memory at: [ 1141.015287][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.021131][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.026073][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.031183][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.036124][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.040630][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.045311][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.051380][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.057537][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.062737][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.067592][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.072099][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.078411][T23321] [ 1141.080732][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1141.087408][T23321] do_recvmmsg+0xbc/0x2300 [ 1141.091827][T23321] do_recvmmsg+0xbc/0x2300 [ 1141.281222][T23321] not chained 870000 origins [ 1141.285864][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1141.294618][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.304680][T23321] Call Trace: [ 1141.307975][T23321] dump_stack+0x21c/0x280 [ 1141.312305][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1141.318031][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1141.323228][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.329120][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1141.335191][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1141.340391][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1141.346035][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1141.352102][T23321] ? _copy_from_user+0x1fd/0x300 [ 1141.357037][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1141.362229][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.367169][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.372286][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.377226][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.381743][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1141.386939][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1141.392829][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1141.398022][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1141.403647][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1141.408932][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1141.413696][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.418380][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1141.424188][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1141.429404][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.435466][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.441615][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.446827][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.451704][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.456205][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.462516][T23321] RIP: 0023:0xf7fe7549 [ 1141.466575][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1141.486191][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1141.494600][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1141.502577][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1141.510539][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1141.518499][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1141.526457][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1141.534419][T23321] Uninit was stored to memory at: [ 1141.539434][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.545140][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.550069][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.555168][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.560096][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.564586][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.569260][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.575314][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.581457][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.586646][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.591500][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.595994][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.602294][T23321] [ 1141.604605][T23321] Uninit was stored to memory at: [ 1141.609618][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.615322][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.620337][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.625435][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.630361][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.634856][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.639528][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.645583][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.651724][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.656929][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.661769][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.666261][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.672562][T23321] [ 1141.674876][T23321] Uninit was stored to memory at: [ 1141.679907][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.685612][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.690557][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.695671][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.700600][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.705093][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.709759][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.715815][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.721972][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.727171][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.732014][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.736513][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.742939][T23321] [ 1141.745254][T23321] Uninit was stored to memory at: [ 1141.750275][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.755991][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.760937][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.766041][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.770972][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.775466][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.780134][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.786191][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.792333][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.797521][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.802360][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.806860][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.813162][T23321] [ 1141.815472][T23321] Uninit was stored to memory at: [ 1141.820501][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.826207][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.831131][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.836228][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.841164][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.845656][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.850333][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.856393][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.862536][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.867737][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.872697][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.877196][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.883504][T23321] [ 1141.885835][T23321] Uninit was stored to memory at: [ 1141.890969][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.896681][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.901629][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.906730][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.911658][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.916157][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.920826][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.926887][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1141.933121][T23321] __do_fast_syscall_32+0x102/0x160 [ 1141.938312][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1141.943154][T23321] do_SYSENTER_32+0x73/0x90 [ 1141.947651][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1141.953958][T23321] [ 1141.956269][T23321] Uninit was stored to memory at: [ 1141.961284][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1141.967134][T23321] __msan_chain_origin+0x57/0xa0 [ 1141.972059][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1141.977161][T23321] get_compat_msghdr+0x108/0x2b0 [ 1141.982086][T23321] do_recvmmsg+0xdaf/0x2300 [ 1141.986577][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1141.991241][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1141.997295][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.003438][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.008628][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.013469][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.017965][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.024270][T23321] [ 1142.026602][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1142.033268][T23321] do_recvmmsg+0xbc/0x2300 [ 1142.037669][T23321] do_recvmmsg+0xbc/0x2300 [ 1142.079445][T23321] not chained 880000 origins [ 1142.084083][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1142.092823][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.102860][T23321] Call Trace: [ 1142.106169][T23321] dump_stack+0x21c/0x280 [ 1142.110493][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1142.116207][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1142.121413][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1142.127209][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1142.133261][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1142.138446][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1142.144074][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1142.150132][T23321] ? _copy_from_user+0x1fd/0x300 [ 1142.155058][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1142.160250][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.165183][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.170290][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.175237][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.179741][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1142.184961][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1142.190849][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1142.196059][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1142.201690][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1142.206970][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1142.211728][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.216403][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1142.222221][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1142.227415][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.233482][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.239655][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.244866][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.249728][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.254226][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.260537][T23321] RIP: 0023:0xf7fe7549 [ 1142.264596][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1142.284186][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1142.292610][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1142.300567][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1142.308529][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1142.316612][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1142.324570][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1142.332531][T23321] Uninit was stored to memory at: [ 1142.337651][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.343371][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.348331][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.353433][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.358359][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.362848][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.367514][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.373568][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.379713][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.384919][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.389767][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.394261][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.400563][T23321] [ 1142.402886][T23321] Uninit was stored to memory at: [ 1142.407899][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.413603][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.418637][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.423735][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.428662][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.433277][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.437964][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.444018][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.450160][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.455368][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.460209][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.464704][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.471027][T23321] [ 1142.473338][T23321] Uninit was stored to memory at: [ 1142.478348][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.484051][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.488975][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.494091][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.499019][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.503510][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.508176][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.514232][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.520374][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.525565][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.530407][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.534904][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.541232][T23321] [ 1142.543539][T23321] Uninit was stored to memory at: [ 1142.548636][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.554435][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.559361][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.564462][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.569387][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.573881][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.578550][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.584605][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.590767][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.595959][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.600889][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.605382][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.611686][T23321] [ 1142.613999][T23321] Uninit was stored to memory at: [ 1142.619120][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.624825][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.629750][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.634849][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.639776][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.644269][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.648941][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.654999][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.661156][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.666346][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.671186][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.675677][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.681980][T23321] [ 1142.684291][T23321] Uninit was stored to memory at: [ 1142.689320][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.695026][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.699952][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.705054][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.710012][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.714515][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.719184][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.725267][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.731434][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.736630][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.741476][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.745975][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.752281][T23321] [ 1142.754591][T23321] Uninit was stored to memory at: [ 1142.759625][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1142.765332][T23321] __msan_chain_origin+0x57/0xa0 [ 1142.770256][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1142.775354][T23321] get_compat_msghdr+0x108/0x2b0 [ 1142.780279][T23321] do_recvmmsg+0xdaf/0x2300 [ 1142.784774][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1142.789471][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1142.795634][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1142.801779][T23321] __do_fast_syscall_32+0x102/0x160 [ 1142.807079][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1142.811921][T23321] do_SYSENTER_32+0x73/0x90 [ 1142.816414][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1142.822720][T23321] [ 1142.825033][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1142.831694][T23321] do_recvmmsg+0xbc/0x2300 [ 1142.836099][T23321] do_recvmmsg+0xbc/0x2300 [ 1143.111139][T23321] not chained 890000 origins [ 1143.115776][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1143.124525][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.134566][T23321] Call Trace: [ 1143.137868][T23321] dump_stack+0x21c/0x280 [ 1143.142189][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1143.147902][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1143.153088][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.158884][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1143.164941][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1143.170215][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1143.175865][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1143.181939][T23321] ? _copy_from_user+0x1fd/0x300 [ 1143.186869][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1143.192057][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.196988][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.202096][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.207050][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.211546][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1143.216732][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1143.222616][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1143.227799][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1143.233415][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1143.238691][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1143.243445][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.248111][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1143.253906][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1143.259094][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.265154][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.271299][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.276490][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.281334][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.285836][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.292148][T23321] RIP: 0023:0xf7fe7549 [ 1143.296228][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1143.315821][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1143.324227][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1143.332204][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.340164][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1143.348122][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1143.356079][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1143.364038][T23321] Uninit was stored to memory at: [ 1143.369052][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.374757][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.379682][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.384784][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.389710][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.394201][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.398866][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.404941][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.411088][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.416280][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.421119][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.425614][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.431928][T23321] [ 1143.434239][T23321] Uninit was stored to memory at: [ 1143.439251][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.444957][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.449885][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.455008][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.459938][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.464429][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.469100][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.475154][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.481313][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.486499][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.491336][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.495829][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.502130][T23321] [ 1143.504445][T23321] Uninit was stored to memory at: [ 1143.509477][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.515181][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.520124][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.525226][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.530153][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.534647][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.539314][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.545388][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.551547][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.556732][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.561570][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.566064][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.572377][T23321] [ 1143.574701][T23321] Uninit was stored to memory at: [ 1143.579729][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.585435][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.590385][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.595499][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.600425][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.604931][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.609595][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.615668][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.621811][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.627003][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.631857][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.636365][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.642669][T23321] [ 1143.644980][T23321] Uninit was stored to memory at: [ 1143.649996][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.655793][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.660728][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.665831][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.670761][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.675251][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.679918][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.685978][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.692121][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.697307][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.702164][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.706675][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.713001][T23321] [ 1143.715321][T23321] Uninit was stored to memory at: [ 1143.720343][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.726067][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.730995][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.736095][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.741021][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.745512][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.750181][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.756253][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.762397][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.767607][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.772445][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.776940][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.783245][T23321] [ 1143.785555][T23321] Uninit was stored to memory at: [ 1143.790566][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1143.796274][T23321] __msan_chain_origin+0x57/0xa0 [ 1143.801197][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1143.806298][T23321] get_compat_msghdr+0x108/0x2b0 [ 1143.811221][T23321] do_recvmmsg+0xdaf/0x2300 [ 1143.815711][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1143.820378][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1143.826455][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1143.832615][T23321] __do_fast_syscall_32+0x102/0x160 [ 1143.837802][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1143.842658][T23321] do_SYSENTER_32+0x73/0x90 [ 1143.847153][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1143.853455][T23321] [ 1143.855765][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1143.862425][T23321] do_recvmmsg+0xbc/0x2300 [ 1143.866843][T23321] do_recvmmsg+0xbc/0x2300 [ 1144.110326][T23317] not chained 900000 origins [ 1144.114974][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1144.123727][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.133777][T23317] Call Trace: [ 1144.137073][T23317] dump_stack+0x21c/0x280 [ 1144.141407][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1144.147136][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1144.152335][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1144.158142][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1144.164234][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1144.169437][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1144.175081][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1144.181150][T23317] ? _copy_from_user+0x1fd/0x300 [ 1144.186091][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1144.191286][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.196225][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.201346][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.206289][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.210800][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1144.216877][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1144.222076][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1144.227974][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1144.233170][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1144.238801][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1144.244090][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1144.248854][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.253537][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1144.259340][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1144.264544][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.270618][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.276776][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.281978][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.286866][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.291374][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.297697][T23317] RIP: 0023:0xf7fe7549 [ 1144.301766][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1144.321373][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1144.329791][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1144.337785][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1144.345757][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1144.353729][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1144.361708][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1144.369681][T23317] Uninit was stored to memory at: [ 1144.374730][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.380450][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.385394][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.390506][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.395446][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.399956][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.404638][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.410720][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.416879][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.422083][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.426934][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.431438][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.437971][T23317] [ 1144.440294][T23317] Uninit was stored to memory at: [ 1144.445344][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.451063][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.456003][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.461115][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.466053][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.470560][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.475461][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.481528][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.487682][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.492880][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.497734][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.502236][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.508547][T23317] [ 1144.510867][T23317] Uninit was stored to memory at: [ 1144.515901][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.521617][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.526557][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.531667][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.536653][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.541154][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.545829][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.552021][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.558197][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.563398][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.568251][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.572804][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.579117][T23317] [ 1144.581538][T23317] Uninit was stored to memory at: [ 1144.586601][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.592317][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.597315][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.602427][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.607365][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.611870][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.616616][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.622688][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.628845][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.634110][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.638963][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.643474][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.649787][T23317] [ 1144.652119][T23317] Uninit was stored to memory at: [ 1144.657144][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.662860][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.667797][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.672909][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.677864][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.682367][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.687044][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.693148][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.699303][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.704503][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.709384][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.713910][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.720310][T23317] [ 1144.722631][T23317] Uninit was stored to memory at: [ 1144.727657][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.733376][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.738314][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.743425][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.748366][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.752866][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.757544][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.763613][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.769791][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.775135][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.779989][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.784499][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.790811][T23317] [ 1144.793154][T23317] Uninit was stored to memory at: [ 1144.798180][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1144.803900][T23317] __msan_chain_origin+0x57/0xa0 [ 1144.808943][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1144.814142][T23317] get_compat_msghdr+0x108/0x2b0 [ 1144.819191][T23317] do_recvmmsg+0xdaf/0x2300 [ 1144.823693][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1144.828375][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1144.834448][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1144.840615][T23317] __do_fast_syscall_32+0x102/0x160 [ 1144.845811][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1144.850662][T23317] do_SYSENTER_32+0x73/0x90 [ 1144.855170][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1144.861481][T23317] [ 1144.864026][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1144.870711][T23317] do_recvmmsg+0xbc/0x2300 [ 1144.875132][T23317] do_recvmmsg+0xbc/0x2300 [ 1145.095828][T23317] not chained 910000 origins [ 1145.100458][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1145.109215][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.119265][T23317] Call Trace: [ 1145.122560][T23317] dump_stack+0x21c/0x280 [ 1145.126913][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1145.132753][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1145.137954][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1145.143761][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1145.149827][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1145.155023][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1145.160660][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1145.166724][T23317] ? _copy_from_user+0x1fd/0x300 [ 1145.171658][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1145.176858][T23317] __msan_chain_origin+0x57/0xa0 [ 1145.181794][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1145.186911][T23317] get_compat_msghdr+0x108/0x2b0 [ 1145.191850][T23317] do_recvmmsg+0xdaf/0x2300 [ 1145.196349][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1145.202419][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1145.207615][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1145.213503][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1145.218695][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1145.224327][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1145.227541][T23321] not chained 920000 origins [ 1145.229612][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1145.239033][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1145.243696][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1145.249485][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1145.254669][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.261190][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.267430][T23317] __do_fast_syscall_32+0x102/0x160 [ 1145.272635][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1145.277488][T23317] do_SYSENTER_32+0x73/0x90 [ 1145.281980][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.288350][T23317] RIP: 0023:0xf7fe7549 [ 1145.292407][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1145.312129][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1145.320551][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1145.328612][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1145.336574][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1145.344534][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1145.352493][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1145.360468][T23317] Uninit was stored to memory at: [ 1145.360482][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1145.360500][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.365504][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1145.374249][T23321] Call Trace: [ 1145.384290][T23317] __msan_chain_origin+0x57/0xa0 [ 1145.390079][T23321] dump_stack+0x21c/0x280 [ 1145.393339][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1145.398249][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1145.402552][T23317] get_compat_msghdr+0x108/0x2b0 [ 1145.407655][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1145.413360][T23317] do_recvmmsg+0xdaf/0x2300 [ 1145.418282][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1145.423468][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1145.427941][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1145.433733][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.438381][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1145.444434][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.450486][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1145.455661][T23317] __do_fast_syscall_32+0x102/0x160 [ 1145.461802][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1145.467402][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1145.472589][T23321] ? _copy_from_user+0x1fd/0x300 [ 1145.478645][T23317] do_SYSENTER_32+0x73/0x90 [ 1145.483566][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1145.488497][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.492985][T23321] __msan_chain_origin+0x57/0xa0 [ 1145.498147][T23317] [ 1145.504457][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1145.509373][T23317] Uninit was stored to memory at: [ 1145.511690][T23321] get_compat_msghdr+0x108/0x2b0 [ 1145.516775][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1145.521784][T23321] do_recvmmsg+0xdaf/0x2300 [ 1145.526692][T23317] __msan_chain_origin+0x57/0xa0 [ 1145.532387][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1145.536864][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1145.541778][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1145.546947][T23317] get_compat_msghdr+0x108/0x2b0 [ 1145.552031][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1145.557896][T23317] do_recvmmsg+0xdaf/0x2300 [ 1145.562806][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1145.567977][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1145.572468][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1145.578079][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.582725][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1145.587983][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.594019][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1145.598764][T23317] __do_fast_syscall_32+0x102/0x160 [ 1145.604888][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1145.609538][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1145.614706][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1145.620498][T23317] do_SYSENTER_32+0x73/0x90 [ 1145.625322][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.630509][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.634986][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.641026][T23317] [ 1145.647364][T23321] __do_fast_syscall_32+0x102/0x160 [ 1145.653490][T23317] Uninit was stored to memory at: [ 1145.655807][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1145.660975][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1145.665991][T23321] do_SYSENTER_32+0x73/0x90 [ 1145.670832][T23317] __msan_chain_origin+0x57/0xa0 [ 1145.676537][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.681027][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1145.685936][T23321] RIP: 0023:0xf7fe7549 [ 1145.692240][T23317] get_compat_msghdr+0x108/0x2b0 [ 1145.697325][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1145.701380][T23317] do_recvmmsg+0xdaf/0x2300 [ 1145.706284][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 [ 1145.725901][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1145.730370][T23321] ORIG_RAX: 0000000000000151 [ 1145.736431][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.741076][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1145.745734][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.751768][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1145.759754][T23317] __do_fast_syscall_32+0x102/0x160 [ 1145.765889][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1145.773845][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1145.779027][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1145.787001][T23317] do_SYSENTER_32+0x73/0x90 [ 1145.791818][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1145.799891][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.804356][T23321] Uninit was stored to memory at: [ 1145.812402][T23317] [ 1145.818730][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1145.823715][T23317] Uninit was stored to memory at: [ 1145.826027][T23321] __msan_chain_origin+0x57/0xa0 [ 1145.831721][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1145.836717][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1145.841625][T23317] __msan_chain_origin+0x57/0xa0 [ 1145.847330][T23321] get_compat_msghdr+0x108/0x2b0 [ 1145.852414][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1145.857337][T23321] do_recvmmsg+0xdaf/0x2300 [ 1145.862245][T23317] get_compat_msghdr+0x108/0x2b0 [ 1145.867342][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1145.871835][T23317] do_recvmmsg+0xdaf/0x2300 [ 1145.876750][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.881415][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1145.885892][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.891931][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1145.896591][T23321] __do_fast_syscall_32+0x102/0x160 [ 1145.902714][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1145.908752][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1145.913930][T23317] __do_fast_syscall_32+0x102/0x160 [ 1145.920058][T23321] do_SYSENTER_32+0x73/0x90 [ 1145.924880][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1145.930054][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.934548][T23317] do_SYSENTER_32+0x73/0x90 [ 1145.939355][T23321] [ 1145.945665][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1145.950129][T23321] Uninit was stored to memory at: [ 1145.952446][T23317] [ 1145.958753][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1145.963755][T23317] Uninit was stored to memory at: [ 1145.966065][T23321] __msan_chain_origin+0x57/0xa0 [ 1145.971757][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1145.976754][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1145.981661][T23317] __msan_chain_origin+0x57/0xa0 [ 1145.987368][T23321] get_compat_msghdr+0x108/0x2b0 [ 1145.992572][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1145.997485][T23321] do_recvmmsg+0xdaf/0x2300 [ 1146.002398][T23317] get_compat_msghdr+0x108/0x2b0 [ 1146.007480][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1146.011955][T23317] do_recvmmsg+0xdaf/0x2300 [ 1146.016876][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.021522][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1146.026002][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.032043][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.036689][T23321] __do_fast_syscall_32+0x102/0x160 [ 1146.042827][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.048954][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1146.054141][T23317] __do_fast_syscall_32+0x102/0x160 [ 1146.060265][T23321] do_SYSENTER_32+0x73/0x90 [ 1146.065088][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1146.070276][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.074748][T23317] do_SYSENTER_32+0x73/0x90 [ 1146.079557][T23321] [ 1146.085884][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.090346][T23321] Uninit was stored to memory at: [ 1146.092648][T23317] [ 1146.098953][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1146.103938][T23317] Uninit was stored to memory at: [ 1146.106253][T23321] __msan_chain_origin+0x57/0xa0 [ 1146.111944][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1146.116941][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1146.121851][T23317] __msan_chain_origin+0x57/0xa0 [ 1146.127548][T23321] get_compat_msghdr+0x108/0x2b0 [ 1146.132643][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1146.137553][T23321] do_recvmmsg+0xdaf/0x2300 [ 1146.142459][T23317] get_compat_msghdr+0x108/0x2b0 [ 1146.147547][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1146.152019][T23317] do_recvmmsg+0xdaf/0x2300 [ 1146.156930][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.161576][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1146.166067][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.172121][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.176771][T23321] __do_fast_syscall_32+0x102/0x160 [ 1146.182897][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.188939][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1146.194109][T23317] __do_fast_syscall_32+0x102/0x160 [ 1146.200251][T23321] do_SYSENTER_32+0x73/0x90 [ 1146.205186][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1146.210360][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.214835][T23317] do_SYSENTER_32+0x73/0x90 [ 1146.219643][T23321] [ 1146.225993][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.230455][T23321] Uninit was stored to memory at: [ 1146.232754][T23317] [ 1146.239062][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1146.244050][T23317] Uninit was stored to memory at: [ 1146.246380][T23321] __msan_chain_origin+0x57/0xa0 [ 1146.252072][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1146.257082][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1146.261992][T23317] __msan_chain_origin+0x57/0xa0 [ 1146.267700][T23321] get_compat_msghdr+0x108/0x2b0 [ 1146.272795][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1146.277701][T23321] do_recvmmsg+0xdaf/0x2300 [ 1146.282613][T23317] get_compat_msghdr+0x108/0x2b0 [ 1146.287711][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1146.292199][T23317] do_recvmmsg+0xdaf/0x2300 [ 1146.297109][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.301772][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1146.306337][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.312392][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.317045][T23321] __do_fast_syscall_32+0x102/0x160 [ 1146.323174][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.329212][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1146.334382][T23317] __do_fast_syscall_32+0x102/0x160 [ 1146.340523][T23321] do_SYSENTER_32+0x73/0x90 [ 1146.345350][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1146.350523][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.355011][T23317] do_SYSENTER_32+0x73/0x90 [ 1146.359823][T23321] [ 1146.366166][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.370628][T23321] Uninit was stored to memory at: [ 1146.372947][T23317] [ 1146.379255][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1146.384258][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1146.386568][T23321] __msan_chain_origin+0x57/0xa0 [ 1146.392258][T23317] do_recvmmsg+0xbc/0x2300 [ 1146.399030][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1146.403945][T23317] do_recvmmsg+0xbc/0x2300 [ 1146.408333][T23321] get_compat_msghdr+0x108/0x2b0 [ 1146.422741][T23321] do_recvmmsg+0xdaf/0x2300 [ 1146.427271][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1146.431958][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.438120][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.444316][T23321] __do_fast_syscall_32+0x102/0x160 [ 1146.449517][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1146.454382][T23321] do_SYSENTER_32+0x73/0x90 [ 1146.458956][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.465300][T23321] [ 1146.467710][T23321] Uninit was stored to memory at: [ 1146.472738][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1146.478457][T23321] __msan_chain_origin+0x57/0xa0 [ 1146.483400][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1146.488514][T23321] get_compat_msghdr+0x108/0x2b0 [ 1146.493461][T23321] do_recvmmsg+0xdaf/0x2300 [ 1146.497970][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1146.502650][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.508719][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.514873][T23321] __do_fast_syscall_32+0x102/0x160 [ 1146.520076][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1146.524931][T23321] do_SYSENTER_32+0x73/0x90 [ 1146.529436][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.535748][T23321] [ 1146.538067][T23321] Uninit was stored to memory at: [ 1146.543095][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1146.548811][T23321] __msan_chain_origin+0x57/0xa0 [ 1146.553748][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1146.558858][T23321] get_compat_msghdr+0x108/0x2b0 [ 1146.563795][T23321] do_recvmmsg+0xdaf/0x2300 [ 1146.568301][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1146.572988][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1146.579052][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1146.585206][T23321] __do_fast_syscall_32+0x102/0x160 [ 1146.590407][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1146.595367][T23321] do_SYSENTER_32+0x73/0x90 [ 1146.599872][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1146.606228][T23321] [ 1146.608554][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1146.615235][T23321] do_recvmmsg+0xbc/0x2300 [ 1146.619649][T23321] do_recvmmsg+0xbc/0x2300 [ 1146.941617][T23321] not chained 930000 origins [ 1146.946263][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1146.955017][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.965072][T23321] Call Trace: [ 1146.968369][T23321] dump_stack+0x21c/0x280 [ 1146.972701][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1146.978449][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1146.983655][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1146.989466][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1146.995536][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.000736][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1147.006376][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1147.012447][T23321] ? _copy_from_user+0x1fd/0x300 [ 1147.017386][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.022595][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.027644][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.032763][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.037702][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.042210][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.047408][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1147.053302][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.058498][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1147.064134][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1147.069426][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1147.074232][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.078915][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1147.084721][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.089944][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.096020][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.102180][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.107388][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.112243][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.116751][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.123083][T23321] RIP: 0023:0xf7fe7549 [ 1147.127156][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1147.146764][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1147.155184][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1147.163290][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1147.171259][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1147.179232][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1147.187206][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1147.195177][T23321] Uninit was stored to memory at: [ 1147.200210][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.205929][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.210867][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.215981][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.220922][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.225426][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.230106][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.236209][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.242368][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.247572][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.252427][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.256935][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.263250][T23321] [ 1147.265583][T23321] Uninit was stored to memory at: [ 1147.270614][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.276332][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.281268][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.286379][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.291391][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.295900][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.300578][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.306665][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.312822][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.318022][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.322877][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.327387][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.333700][T23321] [ 1147.336024][T23321] Uninit was stored to memory at: [ 1147.341057][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.346876][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.351816][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.356999][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.361941][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.366583][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.371266][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.377355][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.383518][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.388730][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.393587][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.398225][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.404539][T23321] [ 1147.406860][T23321] Uninit was stored to memory at: [ 1147.411898][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.417702][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.422643][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.427755][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.432699][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.437294][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.441974][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.448044][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.454205][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.459495][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.464353][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.468860][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.475174][T23321] [ 1147.477495][T23321] Uninit was stored to memory at: [ 1147.482552][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.488278][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.493219][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.498328][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.503267][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.507841][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.512524][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.518592][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.524751][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.529960][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.534815][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.539322][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.545634][T23321] [ 1147.547954][T23321] Uninit was stored to memory at: [ 1147.552982][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.558700][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.563651][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.569039][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.574007][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.578514][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.583195][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.589289][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.595448][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.600654][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.605512][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.610024][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.616338][T23321] [ 1147.618661][T23321] Uninit was stored to memory at: [ 1147.623691][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1147.629419][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.634361][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.639474][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.644435][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.648948][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1147.653637][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1147.659850][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1147.666012][T23321] __do_fast_syscall_32+0x102/0x160 [ 1147.671247][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1147.676103][T23321] do_SYSENTER_32+0x73/0x90 [ 1147.680623][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1147.686937][T23321] [ 1147.689262][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1147.695955][T23321] do_recvmmsg+0xbc/0x2300 [ 1147.700376][T23321] do_recvmmsg+0xbc/0x2300 [ 1147.887049][T23321] not chained 940000 origins [ 1147.891692][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1147.900452][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.910619][T23321] Call Trace: [ 1147.913929][T23321] dump_stack+0x21c/0x280 [ 1147.918263][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1147.923997][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.929199][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1147.935011][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1147.941086][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.946289][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1147.951930][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1147.958004][T23321] ? _copy_from_user+0x1fd/0x300 [ 1147.962964][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.968164][T23321] __msan_chain_origin+0x57/0xa0 [ 1147.973112][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1147.978231][T23321] get_compat_msghdr+0x108/0x2b0 [ 1147.983175][T23321] do_recvmmsg+0xdaf/0x2300 [ 1147.987683][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1147.992894][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1147.998789][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1148.003991][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1148.009641][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1148.014936][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1148.019701][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.024387][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1148.030193][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1148.035405][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.041499][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.047666][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.052871][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.057722][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.062233][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.068554][T23321] RIP: 0023:0xf7fe7549 [ 1148.072629][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1148.092248][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1148.100696][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1148.108709][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1148.116691][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1148.124663][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1148.132669][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1148.140641][T23321] Uninit was stored to memory at: [ 1148.145675][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1148.151398][T23321] __msan_chain_origin+0x57/0xa0 [ 1148.156339][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1148.161489][T23321] get_compat_msghdr+0x108/0x2b0 [ 1148.165822][T23317] not chained 950000 origins [ 1148.166454][T23321] do_recvmmsg+0xdaf/0x2300 [ 1148.171032][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1148.175543][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.184278][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.188939][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.198958][T23317] Call Trace: [ 1148.205012][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.208374][T23317] dump_stack+0x21c/0x280 [ 1148.214504][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.218804][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1148.224090][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.229800][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1148.234635][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.239826][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1148.244302][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.250082][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1148.256367][T23321] [ 1148.262430][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1148.264723][T23321] Uninit was stored to memory at: [ 1148.269908][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1148.274906][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1148.280532][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1148.286218][T23321] __msan_chain_origin+0x57/0xa0 [ 1148.292270][T23317] ? _copy_from_user+0x1fd/0x300 [ 1148.297178][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1148.302087][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1148.307171][T23321] get_compat_msghdr+0x108/0x2b0 [ 1148.312343][T23317] __msan_chain_origin+0x57/0xa0 [ 1148.317255][T23321] do_recvmmsg+0xdaf/0x2300 [ 1148.322194][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1148.326685][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.331790][T23317] get_compat_msghdr+0x108/0x2b0 [ 1148.336469][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.341386][T23317] do_recvmmsg+0xdaf/0x2300 [ 1148.341410][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1148.347453][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.351930][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1148.357972][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.364123][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1148.369313][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.374671][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1148.380538][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.385372][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1148.390549][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.395023][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1148.400624][T23321] [ 1148.406941][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1148.412200][T23321] Uninit was stored to memory at: [ 1148.414514][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1148.419248][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1148.424246][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1148.428882][T23321] __msan_chain_origin+0x57/0xa0 [ 1148.428906][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1148.434606][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1148.440387][T23321] get_compat_msghdr+0x108/0x2b0 [ 1148.445296][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.450384][T23321] do_recvmmsg+0xdaf/0x2300 [ 1148.455568][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.460478][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.466533][T23317] __do_fast_syscall_32+0x102/0x160 [ 1148.471026][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.477166][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1148.481815][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.486985][T23317] do_SYSENTER_32+0x73/0x90 [ 1148.493024][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.497857][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.503979][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.508444][T23317] RIP: 0023:0xf7fe7549 [ 1148.513619][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.519919][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1148.524743][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.528777][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 [ 1148.533246][T23321] [ 1148.552827][T23317] ORIG_RAX: 0000000000000151 [ 1148.559123][T23321] Uninit was stored to memory at: [ 1148.565177][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1148.567487][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1148.572145][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1148.577147][T23321] __msan_chain_origin+0x57/0xa0 [ 1148.585092][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1148.590788][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1148.598729][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1148.603642][T23321] get_compat_msghdr+0x108/0x2b0 [ 1148.611600][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1148.616702][T23321] do_recvmmsg+0xdaf/0x2300 [ 1148.624638][T23317] Uninit was stored to memory at: [ 1148.629556][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.637502][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1148.641979][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.646971][T23317] __msan_chain_origin+0x57/0xa0 [ 1148.651625][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.657315][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1148.663357][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.668262][T23317] get_compat_msghdr+0x108/0x2b0 [ 1148.674389][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.679469][T23317] do_recvmmsg+0xdaf/0x2300 [ 1148.684641][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.689548][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1148.694377][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.698843][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.703302][T23321] [ 1148.707978][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.714265][T23321] Uninit was stored to memory at: [ 1148.720317][T23317] __do_fast_syscall_32+0x102/0x160 [ 1148.722620][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1148.728774][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1148.733789][T23321] __msan_chain_origin+0x57/0xa0 [ 1148.738979][T23317] do_SYSENTER_32+0x73/0x90 [ 1148.744671][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1148.749512][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.754433][T23321] get_compat_msghdr+0x108/0x2b0 [ 1148.758898][T23317] [ 1148.763994][T23321] do_recvmmsg+0xdaf/0x2300 [ 1148.770280][T23317] Uninit was stored to memory at: [ 1148.775212][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.777515][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1148.782008][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.787003][T23317] __msan_chain_origin+0x57/0xa0 [ 1148.791668][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.797375][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1148.803415][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.808323][T23317] get_compat_msghdr+0x108/0x2b0 [ 1148.814448][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.819545][T23317] do_recvmmsg+0xdaf/0x2300 [ 1148.824716][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.829758][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1148.834581][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.839073][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.843547][T23321] [ 1148.848209][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.854495][T23321] Uninit was stored to memory at: [ 1148.860546][T23317] __do_fast_syscall_32+0x102/0x160 [ 1148.862849][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1148.868981][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1148.873993][T23321] __msan_chain_origin+0x57/0xa0 [ 1148.879180][T23317] do_SYSENTER_32+0x73/0x90 [ 1148.884871][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1148.889697][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.894715][T23321] get_compat_msghdr+0x108/0x2b0 [ 1148.899178][T23317] [ 1148.904273][T23321] do_recvmmsg+0xdaf/0x2300 [ 1148.910670][T23317] Uninit was stored to memory at: [ 1148.915604][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1148.917908][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1148.922403][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.927411][T23317] __msan_chain_origin+0x57/0xa0 [ 1148.932067][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.937886][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1148.943928][T23321] __do_fast_syscall_32+0x102/0x160 [ 1148.948847][T23317] get_compat_msghdr+0x108/0x2b0 [ 1148.954990][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1148.960090][T23317] do_recvmmsg+0xdaf/0x2300 [ 1148.965275][T23321] do_SYSENTER_32+0x73/0x90 [ 1148.970185][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1148.975011][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1148.979487][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1148.983950][T23321] [ 1148.988628][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1148.994916][T23321] Uninit was stored to memory at: [ 1149.000983][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.003298][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1149.009441][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.014448][T23321] __msan_chain_origin+0x57/0xa0 [ 1149.019635][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.025324][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1149.030166][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.035073][T23321] get_compat_msghdr+0x108/0x2b0 [ 1149.039536][T23317] [ 1149.044648][T23321] do_recvmmsg+0xdaf/0x2300 [ 1149.050954][T23317] Uninit was stored to memory at: [ 1149.055894][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1149.058211][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1149.062691][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.067685][T23317] __msan_chain_origin+0x57/0xa0 [ 1149.072338][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.078027][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1149.084069][T23321] __do_fast_syscall_32+0x102/0x160 [ 1149.088993][T23317] get_compat_msghdr+0x108/0x2b0 [ 1149.095121][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1149.100204][T23317] do_recvmmsg+0xdaf/0x2300 [ 1149.105392][T23321] do_SYSENTER_32+0x73/0x90 [ 1149.110304][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1149.115129][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.119617][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.124094][T23321] [ 1149.128768][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.135057][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1149.141120][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.143423][T23321] do_recvmmsg+0xbc/0x2300 [ 1149.149570][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.156227][T23321] do_recvmmsg+0xbc/0x2300 [ 1149.161398][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.179526][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.185842][T23317] [ 1149.188163][T23317] Uninit was stored to memory at: [ 1149.193187][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1149.198905][T23317] __msan_chain_origin+0x57/0xa0 [ 1149.203848][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1149.208960][T23317] get_compat_msghdr+0x108/0x2b0 [ 1149.213984][T23317] do_recvmmsg+0xdaf/0x2300 [ 1149.218479][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1149.223147][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.229206][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.235351][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.240630][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.245471][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.249968][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.256270][T23317] [ 1149.258579][T23317] Uninit was stored to memory at: [ 1149.263593][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1149.269314][T23317] __msan_chain_origin+0x57/0xa0 [ 1149.274235][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1149.279332][T23317] get_compat_msghdr+0x108/0x2b0 [ 1149.284255][T23317] do_recvmmsg+0xdaf/0x2300 [ 1149.288747][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1149.293416][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.299471][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.305612][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.310799][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.315637][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.320134][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.326438][T23317] [ 1149.328752][T23317] Uninit was stored to memory at: [ 1149.333767][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1149.339474][T23317] __msan_chain_origin+0x57/0xa0 [ 1149.344401][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1149.349498][T23317] get_compat_msghdr+0x108/0x2b0 [ 1149.354429][T23317] do_recvmmsg+0xdaf/0x2300 [ 1149.358924][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1149.363594][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.369650][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.375796][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.380986][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.385828][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.390341][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.396645][T23317] [ 1149.398978][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1149.405658][T23317] do_recvmmsg+0xbc/0x2300 [ 1149.410065][T23317] do_recvmmsg+0xbc/0x2300 [ 1149.660299][T23317] not chained 960000 origins [ 1149.664920][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1149.673660][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.683698][T23317] Call Trace: [ 1149.687002][T23317] dump_stack+0x21c/0x280 [ 1149.691322][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1149.697037][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1149.702227][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1149.708022][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1149.714076][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1149.719262][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1149.724913][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1149.730983][T23317] ? _copy_from_user+0x1fd/0x300 [ 1149.735924][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1149.741118][T23317] __msan_chain_origin+0x57/0xa0 [ 1149.746056][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1149.751167][T23317] get_compat_msghdr+0x108/0x2b0 [ 1149.756102][T23317] do_recvmmsg+0xdaf/0x2300 [ 1149.760597][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1149.766659][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1149.771851][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1149.777733][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1149.782922][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1149.788558][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1149.793833][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1149.798615][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1149.803287][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1149.809080][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1149.814287][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.820347][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.826495][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.831700][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.836544][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.841043][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.847355][T23317] RIP: 0023:0xf7fe7549 [ 1149.851431][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1149.871048][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1149.879454][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1149.887532][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1149.895503][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1149.903471][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1149.911438][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1149.919408][T23317] Uninit was stored to memory at: [ 1149.924470][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1149.930181][T23317] __msan_chain_origin+0x57/0xa0 [ 1149.935112][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1149.940214][T23317] get_compat_msghdr+0x108/0x2b0 [ 1149.945170][T23317] do_recvmmsg+0xdaf/0x2300 [ 1149.949662][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1149.954330][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1149.960388][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1149.966556][T23317] __do_fast_syscall_32+0x102/0x160 [ 1149.971850][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1149.976707][T23317] do_SYSENTER_32+0x73/0x90 [ 1149.981202][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1149.987525][T23317] [ 1149.989835][T23317] Uninit was stored to memory at: [ 1149.994848][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1150.000555][T23317] __msan_chain_origin+0x57/0xa0 [ 1150.005481][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1150.010579][T23317] get_compat_msghdr+0x108/0x2b0 [ 1150.015507][T23317] do_recvmmsg+0xdaf/0x2300 [ 1150.020002][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1150.024670][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.030726][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.036870][T23317] __do_fast_syscall_32+0x102/0x160 [ 1150.042064][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1150.046910][T23317] do_SYSENTER_32+0x73/0x90 [ 1150.051407][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.057805][T23317] [ 1150.060116][T23317] Uninit was stored to memory at: [ 1150.065134][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1150.070840][T23317] __msan_chain_origin+0x57/0xa0 [ 1150.075767][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1150.080868][T23317] get_compat_msghdr+0x108/0x2b0 [ 1150.085816][T23317] do_recvmmsg+0xdaf/0x2300 [ 1150.090309][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1150.094975][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.101030][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.107173][T23317] __do_fast_syscall_32+0x102/0x160 [ 1150.112383][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1150.117250][T23317] do_SYSENTER_32+0x73/0x90 [ 1150.121746][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.128067][T23317] [ 1150.130378][T23317] Uninit was stored to memory at: [ 1150.135391][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1150.141115][T23317] __msan_chain_origin+0x57/0xa0 [ 1150.146042][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1150.151140][T23317] get_compat_msghdr+0x108/0x2b0 [ 1150.156088][T23317] do_recvmmsg+0xdaf/0x2300 [ 1150.160579][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1150.165244][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.171299][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.177443][T23317] __do_fast_syscall_32+0x102/0x160 [ 1150.182632][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1150.187470][T23317] do_SYSENTER_32+0x73/0x90 [ 1150.191967][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.198289][T23317] [ 1150.200601][T23317] Uninit was stored to memory at: [ 1150.205630][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1150.211351][T23317] __msan_chain_origin+0x57/0xa0 [ 1150.216313][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1150.221412][T23317] get_compat_msghdr+0x108/0x2b0 [ 1150.226356][T23317] do_recvmmsg+0xdaf/0x2300 [ 1150.230847][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1150.235514][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.241575][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.247733][T23317] __do_fast_syscall_32+0x102/0x160 [ 1150.252924][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1150.257778][T23317] do_SYSENTER_32+0x73/0x90 [ 1150.262272][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.268575][T23317] [ 1150.270887][T23317] Uninit was stored to memory at: [ 1150.275908][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1150.281614][T23317] __msan_chain_origin+0x57/0xa0 [ 1150.286555][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1150.291654][T23317] get_compat_msghdr+0x108/0x2b0 [ 1150.296577][T23317] do_recvmmsg+0xdaf/0x2300 [ 1150.301068][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1150.305735][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.311791][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.317953][T23317] __do_fast_syscall_32+0x102/0x160 [ 1150.323143][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1150.327983][T23317] do_SYSENTER_32+0x73/0x90 [ 1150.332480][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.338782][T23317] [ 1150.341093][T23317] Uninit was stored to memory at: [ 1150.346125][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1150.351832][T23317] __msan_chain_origin+0x57/0xa0 [ 1150.356904][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1150.362007][T23317] get_compat_msghdr+0x108/0x2b0 [ 1150.366933][T23317] do_recvmmsg+0xdaf/0x2300 [ 1150.371426][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1150.376092][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.382152][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.388297][T23317] __do_fast_syscall_32+0x102/0x160 [ 1150.393492][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1150.398331][T23317] do_SYSENTER_32+0x73/0x90 [ 1150.402824][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.409131][T23317] [ 1150.411441][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1150.418098][T23317] do_recvmmsg+0xbc/0x2300 [ 1150.422498][T23317] do_recvmmsg+0xbc/0x2300 [ 1150.753883][T23321] not chained 970000 origins [ 1150.758529][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1150.767282][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.777337][T23321] Call Trace: [ 1150.780646][T23321] dump_stack+0x21c/0x280 [ 1150.784984][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1150.790710][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1150.795917][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1150.801727][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1150.807796][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1150.813006][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1150.818645][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1150.824745][T23321] ? _copy_from_user+0x1fd/0x300 [ 1150.829687][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1150.834893][T23321] __msan_chain_origin+0x57/0xa0 [ 1150.839842][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1150.844962][T23321] get_compat_msghdr+0x108/0x2b0 [ 1150.849997][T23321] do_recvmmsg+0xdaf/0x2300 [ 1150.854507][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1150.859709][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1150.865633][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1150.870834][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1150.876508][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1150.881801][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1150.886658][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1150.891341][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1150.897225][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1150.902435][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1150.908526][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1150.914691][T23321] __do_fast_syscall_32+0x102/0x160 [ 1150.919901][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1150.924759][T23321] do_SYSENTER_32+0x73/0x90 [ 1150.929270][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1150.935592][T23321] RIP: 0023:0xf7fe7549 [ 1150.939667][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1150.959274][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1150.967741][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1150.975719][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.983693][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.991806][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1150.999780][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1151.007752][T23321] Uninit was stored to memory at: [ 1151.012816][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.018535][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.023474][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.028587][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.033526][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.038087][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.042766][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.048858][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.055019][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.060238][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.065106][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.069619][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.075950][T23321] [ 1151.078273][T23321] Uninit was stored to memory at: [ 1151.083331][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.089054][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.093997][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.099113][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.104054][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.108560][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.113238][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.119308][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.125471][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.130726][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.135582][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.140090][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.146403][T23321] [ 1151.148721][T23321] Uninit was stored to memory at: [ 1151.153744][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.159462][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.164404][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.169514][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.174456][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.178961][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.183642][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.189735][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.195898][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.201121][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.205976][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.210487][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.216831][T23321] [ 1151.219165][T23321] Uninit was stored to memory at: [ 1151.224191][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.229911][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.234853][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.239962][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.244900][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.249401][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.254079][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.260148][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.266310][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.271514][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.276370][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.280880][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.287194][T23321] [ 1151.289512][T23321] Uninit was stored to memory at: [ 1151.294547][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.300287][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.305226][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.310332][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.315290][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.319795][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.324477][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.330545][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.336711][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.341920][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.346775][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.351282][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.357592][T23321] [ 1151.359913][T23321] Uninit was stored to memory at: [ 1151.364939][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.370658][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.375597][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.380711][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.385654][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.390158][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.394840][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.400910][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.407067][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.412272][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.417125][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.421637][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.427948][T23321] [ 1151.430265][T23321] Uninit was stored to memory at: [ 1151.435289][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.441008][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.445949][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.451062][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.456005][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.460505][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.465185][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.471259][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.477411][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.482609][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.487457][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.491965][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.498272][T23321] [ 1151.500588][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1151.507264][T23321] do_recvmmsg+0xbc/0x2300 [ 1151.511681][T23321] do_recvmmsg+0xbc/0x2300 [ 1151.545483][T23321] not chained 980000 origins [ 1151.550126][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1151.558879][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.568980][T23321] Call Trace: [ 1151.572279][T23321] dump_stack+0x21c/0x280 [ 1151.576610][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1151.582336][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1151.587546][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1151.593361][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1151.599430][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1151.604633][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1151.610271][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1151.616369][T23321] ? _copy_from_user+0x1fd/0x300 [ 1151.621305][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1151.626499][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.631436][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.636546][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.641591][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.646092][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1151.651288][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1151.657175][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1151.662376][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1151.668000][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1151.673296][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1151.678069][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.682746][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1151.688550][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1151.693745][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.700316][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.706468][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.711658][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.716499][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.720998][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.727310][T23321] RIP: 0023:0xf7fe7549 [ 1151.731491][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1151.751226][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1151.759641][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1151.767707][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1151.775694][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1151.783658][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1151.791620][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1151.799679][T23321] Uninit was stored to memory at: [ 1151.804807][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.810514][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.815441][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.820663][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.825591][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.830081][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.834764][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.840823][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.846976][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.852178][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.857021][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.861518][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.867822][T23321] [ 1151.870133][T23321] Uninit was stored to memory at: [ 1151.875146][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.880858][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.885791][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.890893][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.895816][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.900457][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.905135][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.911195][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.917343][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.922534][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.927373][T23321] do_SYSENTER_32+0x73/0x90 [ 1151.931872][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.938190][T23321] [ 1151.940505][T23321] Uninit was stored to memory at: [ 1151.945524][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1151.951232][T23321] __msan_chain_origin+0x57/0xa0 [ 1151.956157][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1151.961257][T23321] get_compat_msghdr+0x108/0x2b0 [ 1151.966182][T23321] do_recvmmsg+0xdaf/0x2300 [ 1151.970672][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1151.975338][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1151.981395][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1151.987538][T23321] __do_fast_syscall_32+0x102/0x160 [ 1151.992724][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1151.997561][T23321] do_SYSENTER_32+0x73/0x90 [ 1152.002089][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.008390][T23321] [ 1152.010697][T23321] Uninit was stored to memory at: [ 1152.015709][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1152.021416][T23321] __msan_chain_origin+0x57/0xa0 [ 1152.026356][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1152.031454][T23321] get_compat_msghdr+0x108/0x2b0 [ 1152.036379][T23321] do_recvmmsg+0xdaf/0x2300 [ 1152.040875][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1152.045541][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.051596][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.057737][T23321] __do_fast_syscall_32+0x102/0x160 [ 1152.062924][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1152.067761][T23321] do_SYSENTER_32+0x73/0x90 [ 1152.072252][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.078554][T23321] [ 1152.080865][T23321] Uninit was stored to memory at: [ 1152.085885][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1152.091586][T23321] __msan_chain_origin+0x57/0xa0 [ 1152.096509][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1152.101606][T23321] get_compat_msghdr+0x108/0x2b0 [ 1152.106530][T23321] do_recvmmsg+0xdaf/0x2300 [ 1152.111021][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1152.115685][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.121739][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.127898][T23321] __do_fast_syscall_32+0x102/0x160 [ 1152.133111][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1152.137968][T23321] do_SYSENTER_32+0x73/0x90 [ 1152.142460][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.148763][T23321] [ 1152.151073][T23321] Uninit was stored to memory at: [ 1152.156090][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1152.161804][T23321] __msan_chain_origin+0x57/0xa0 [ 1152.166732][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1152.171833][T23321] get_compat_msghdr+0x108/0x2b0 [ 1152.176772][T23321] do_recvmmsg+0xdaf/0x2300 [ 1152.181266][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1152.185933][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.191990][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.198133][T23321] __do_fast_syscall_32+0x102/0x160 [ 1152.203323][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1152.208161][T23321] do_SYSENTER_32+0x73/0x90 [ 1152.212655][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.218958][T23321] [ 1152.221270][T23321] Uninit was stored to memory at: [ 1152.226293][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1152.232009][T23321] __msan_chain_origin+0x57/0xa0 [ 1152.236951][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1152.242052][T23321] get_compat_msghdr+0x108/0x2b0 [ 1152.246976][T23321] do_recvmmsg+0xdaf/0x2300 [ 1152.251467][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1152.256134][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.262189][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.268332][T23321] __do_fast_syscall_32+0x102/0x160 [ 1152.273541][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1152.278383][T23321] do_SYSENTER_32+0x73/0x90 [ 1152.282885][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.289188][T23321] [ 1152.291522][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1152.298183][T23321] do_recvmmsg+0xbc/0x2300 [ 1152.302586][T23321] do_recvmmsg+0xbc/0x2300 [ 1152.598353][T23317] not chained 990000 origins [ 1152.602994][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1152.611746][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.621800][T23317] Call Trace: [ 1152.625101][T23317] dump_stack+0x21c/0x280 [ 1152.629436][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1152.635163][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1152.640406][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1152.646213][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1152.652291][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1152.657491][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1152.663146][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1152.669214][T23317] ? _copy_from_user+0x1fd/0x300 [ 1152.674150][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1152.679344][T23317] __msan_chain_origin+0x57/0xa0 [ 1152.684289][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1152.689411][T23317] get_compat_msghdr+0x108/0x2b0 [ 1152.694396][T23317] do_recvmmsg+0xdaf/0x2300 [ 1152.698912][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1152.704992][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1152.710193][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1152.716213][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1152.721414][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1152.727048][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1152.732336][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1152.737104][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1152.741784][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1152.747588][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1152.752788][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.758976][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.765143][T23317] __do_fast_syscall_32+0x102/0x160 [ 1152.770344][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1152.775345][T23317] do_SYSENTER_32+0x73/0x90 [ 1152.779877][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.786198][T23317] RIP: 0023:0xf7fe7549 [ 1152.790270][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1152.809876][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1152.818412][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1152.826409][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1152.834384][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1152.842355][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1152.850332][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1152.858318][T23317] Uninit was stored to memory at: [ 1152.863349][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1152.869085][T23317] __msan_chain_origin+0x57/0xa0 [ 1152.874079][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1152.879203][T23317] get_compat_msghdr+0x108/0x2b0 [ 1152.884144][T23317] do_recvmmsg+0xdaf/0x2300 [ 1152.888650][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1152.893328][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.899394][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.905553][T23317] __do_fast_syscall_32+0x102/0x160 [ 1152.910756][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1152.915608][T23317] do_SYSENTER_32+0x73/0x90 [ 1152.920114][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.926428][T23317] [ 1152.928749][T23317] Uninit was stored to memory at: [ 1152.933777][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1152.939493][T23317] __msan_chain_origin+0x57/0xa0 [ 1152.944432][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1152.949541][T23317] get_compat_msghdr+0x108/0x2b0 [ 1152.954491][T23317] do_recvmmsg+0xdaf/0x2300 [ 1152.958995][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1152.963674][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1152.969739][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1152.975895][T23317] __do_fast_syscall_32+0x102/0x160 [ 1152.981118][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1152.986080][T23317] do_SYSENTER_32+0x73/0x90 [ 1152.990591][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1152.996934][T23317] [ 1152.999254][T23317] Uninit was stored to memory at: [ 1153.004279][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.009999][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.014944][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.020061][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.025007][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.029515][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.034192][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.040260][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.046415][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.051642][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.056530][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.061041][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.067370][T23317] [ 1153.069689][T23317] Uninit was stored to memory at: [ 1153.074711][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.080427][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.085372][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.090483][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.095420][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.099926][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.104604][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.110672][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.116896][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.122105][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.127047][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.131641][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.137954][T23317] [ 1153.140274][T23317] Uninit was stored to memory at: [ 1153.145299][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.151088][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.156131][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.161241][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.166228][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.170733][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.175413][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.181484][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.187651][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.192850][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.197701][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.202329][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.208641][T23317] [ 1153.210962][T23317] Uninit was stored to memory at: [ 1153.215991][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.221711][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.226652][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.231762][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.236703][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.241210][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.245889][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.252054][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.258208][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.263410][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.268258][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.272765][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.279078][T23317] [ 1153.281398][T23317] Uninit was stored to memory at: [ 1153.286455][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.292173][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.297112][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.302223][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.307157][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.311657][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.316340][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.322430][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.328691][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.333896][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.338748][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.343255][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.349565][T23317] [ 1153.351889][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1153.358564][T23317] do_recvmmsg+0xbc/0x2300 [ 1153.362981][T23317] do_recvmmsg+0xbc/0x2300 [ 1153.462201][T23317] not chained 1000000 origins [ 1153.466949][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1153.475703][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.485753][T23317] Call Trace: [ 1153.489059][T23317] dump_stack+0x21c/0x280 [ 1153.493394][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1153.499114][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1153.504302][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1153.510115][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1153.516170][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1153.521358][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1153.526990][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1153.533057][T23317] ? _copy_from_user+0x1fd/0x300 [ 1153.538015][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1153.543207][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.548155][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.553260][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.558192][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.562687][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1153.568747][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1153.573960][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1153.579841][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1153.585033][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1153.590653][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1153.595930][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1153.600683][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.605367][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1153.611161][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1153.616351][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.622410][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.628555][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.633742][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.638582][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.643091][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.649403][T23317] RIP: 0023:0xf7fe7549 [ 1153.653484][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1153.673195][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1153.681631][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1153.689609][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1153.697574][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1153.705661][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1153.713629][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1153.721603][T23317] Uninit was stored to memory at: [ 1153.726626][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.732337][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.737297][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.742397][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.747349][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.751843][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.756530][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.762590][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.768735][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.773945][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.778785][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.783280][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.789584][T23317] [ 1153.791897][T23317] Uninit was stored to memory at: [ 1153.796936][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.802643][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.807566][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.812668][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.817593][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.822084][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.826748][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.832804][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.838959][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.844145][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.849004][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.853499][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.859802][T23317] [ 1153.862113][T23317] Uninit was stored to memory at: [ 1153.867142][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.872861][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.877800][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.882909][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.887844][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.892340][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.897010][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.903072][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.909217][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.914407][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.919245][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.923739][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1153.930041][T23317] [ 1153.932354][T23317] Uninit was stored to memory at: [ 1153.937366][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1153.943070][T23317] __msan_chain_origin+0x57/0xa0 [ 1153.947995][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1153.953096][T23317] get_compat_msghdr+0x108/0x2b0 [ 1153.958021][T23317] do_recvmmsg+0xdaf/0x2300 [ 1153.962513][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1153.967296][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1153.973353][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1153.979601][T23317] __do_fast_syscall_32+0x102/0x160 [ 1153.984808][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1153.989647][T23317] do_SYSENTER_32+0x73/0x90 [ 1153.994156][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.000469][T23317] [ 1154.002777][T23317] Uninit was stored to memory at: [ 1154.007786][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1154.013488][T23317] __msan_chain_origin+0x57/0xa0 [ 1154.018411][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1154.023508][T23317] get_compat_msghdr+0x108/0x2b0 [ 1154.028435][T23317] do_recvmmsg+0xdaf/0x2300 [ 1154.032929][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1154.037613][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.043683][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.049827][T23317] __do_fast_syscall_32+0x102/0x160 [ 1154.055017][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1154.059867][T23317] do_SYSENTER_32+0x73/0x90 [ 1154.064361][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.070664][T23317] [ 1154.072977][T23317] Uninit was stored to memory at: [ 1154.077989][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1154.083690][T23317] __msan_chain_origin+0x57/0xa0 [ 1154.088612][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1154.093727][T23317] get_compat_msghdr+0x108/0x2b0 [ 1154.098652][T23317] do_recvmmsg+0xdaf/0x2300 [ 1154.103252][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1154.107923][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.113981][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.120128][T23317] __do_fast_syscall_32+0x102/0x160 [ 1154.125316][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1154.130156][T23317] do_SYSENTER_32+0x73/0x90 [ 1154.134795][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.141110][T23317] [ 1154.143428][T23317] Uninit was stored to memory at: [ 1154.148448][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1154.154158][T23317] __msan_chain_origin+0x57/0xa0 [ 1154.159090][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1154.164195][T23317] get_compat_msghdr+0x108/0x2b0 [ 1154.169125][T23317] do_recvmmsg+0xdaf/0x2300 [ 1154.173623][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1154.178315][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.184371][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.190551][T23317] __do_fast_syscall_32+0x102/0x160 [ 1154.195758][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1154.200602][T23317] do_SYSENTER_32+0x73/0x90 [ 1154.205100][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.211403][T23317] [ 1154.213715][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1154.220373][T23317] do_recvmmsg+0xbc/0x2300 [ 1154.224781][T23317] do_recvmmsg+0xbc/0x2300 [ 1154.392907][T23321] not chained 1010000 origins [ 1154.397634][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1154.406480][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.416561][T23321] Call Trace: [ 1154.419876][T23321] dump_stack+0x21c/0x280 [ 1154.424208][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1154.429931][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1154.435146][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1154.440959][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1154.447027][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1154.452227][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1154.457882][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1154.463989][T23321] ? _copy_from_user+0x1fd/0x300 [ 1154.468959][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1154.474157][T23321] __msan_chain_origin+0x57/0xa0 [ 1154.479085][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1154.484206][T23321] get_compat_msghdr+0x108/0x2b0 [ 1154.489152][T23321] do_recvmmsg+0xdaf/0x2300 [ 1154.493649][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1154.498836][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1154.504720][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1154.509908][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1154.515528][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1154.520802][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1154.525558][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1154.530227][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1154.536021][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1154.541212][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.547269][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.553419][T23321] __do_fast_syscall_32+0x102/0x160 [ 1154.558606][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1154.563446][T23321] do_SYSENTER_32+0x73/0x90 [ 1154.567940][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.574249][T23321] RIP: 0023:0xf7fe7549 [ 1154.578310][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1154.597903][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1154.606307][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1154.614265][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1154.622242][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.630200][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1154.638156][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.646117][T23321] Uninit was stored to memory at: [ 1154.651133][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1154.656835][T23321] __msan_chain_origin+0x57/0xa0 [ 1154.661757][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1154.666859][T23321] get_compat_msghdr+0x108/0x2b0 [ 1154.671786][T23321] do_recvmmsg+0xdaf/0x2300 [ 1154.676279][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1154.680945][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.687006][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.693147][T23321] __do_fast_syscall_32+0x102/0x160 [ 1154.698334][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1154.703175][T23321] do_SYSENTER_32+0x73/0x90 [ 1154.707666][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.713967][T23321] [ 1154.716275][T23321] Uninit was stored to memory at: [ 1154.721297][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1154.727013][T23321] __msan_chain_origin+0x57/0xa0 [ 1154.731943][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1154.737046][T23321] get_compat_msghdr+0x108/0x2b0 [ 1154.741978][T23321] do_recvmmsg+0xdaf/0x2300 [ 1154.746507][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1154.751179][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.757240][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.763411][T23321] __do_fast_syscall_32+0x102/0x160 [ 1154.768634][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1154.773474][T23321] do_SYSENTER_32+0x73/0x90 [ 1154.778007][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.784309][T23321] [ 1154.786617][T23321] Uninit was stored to memory at: [ 1154.791716][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1154.797419][T23321] __msan_chain_origin+0x57/0xa0 [ 1154.802344][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1154.807443][T23321] get_compat_msghdr+0x108/0x2b0 [ 1154.812368][T23321] do_recvmmsg+0xdaf/0x2300 [ 1154.816859][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1154.821526][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.827600][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.833742][T23321] __do_fast_syscall_32+0x102/0x160 [ 1154.838933][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1154.843774][T23321] do_SYSENTER_32+0x73/0x90 [ 1154.848267][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.854694][T23321] [ 1154.857006][T23321] Uninit was stored to memory at: [ 1154.862019][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1154.867724][T23321] __msan_chain_origin+0x57/0xa0 [ 1154.872649][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1154.877746][T23321] get_compat_msghdr+0x108/0x2b0 [ 1154.882688][T23321] do_recvmmsg+0xdaf/0x2300 [ 1154.887198][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1154.891878][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.897954][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.904105][T23321] __do_fast_syscall_32+0x102/0x160 [ 1154.909309][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1154.914150][T23321] do_SYSENTER_32+0x73/0x90 [ 1154.918644][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.924949][T23321] [ 1154.927259][T23321] Uninit was stored to memory at: [ 1154.932272][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1154.937979][T23321] __msan_chain_origin+0x57/0xa0 [ 1154.942907][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1154.948009][T23321] get_compat_msghdr+0x108/0x2b0 [ 1154.952939][T23321] do_recvmmsg+0xdaf/0x2300 [ 1154.957433][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1154.962099][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1154.968265][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1154.974430][T23321] __do_fast_syscall_32+0x102/0x160 [ 1154.979616][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1154.984479][T23321] do_SYSENTER_32+0x73/0x90 [ 1154.988976][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.995303][T23321] [ 1154.997613][T23321] Uninit was stored to memory at: [ 1155.002625][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.008348][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.013287][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.018398][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.023322][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.027811][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.032478][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.038533][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.044794][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.049984][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.054823][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.059317][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.065617][T23321] [ 1155.067946][T23321] Uninit was stored to memory at: [ 1155.072960][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.078662][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.083586][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.088788][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.093838][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.098330][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.102997][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.109051][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.115210][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.120415][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.125255][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.129750][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.136052][T23321] [ 1155.138364][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1155.145027][T23321] do_recvmmsg+0xbc/0x2300 [ 1155.149432][T23321] do_recvmmsg+0xbc/0x2300 [ 1155.349709][T23321] not chained 1020000 origins [ 1155.354437][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1155.363206][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.373247][T23321] Call Trace: [ 1155.376534][T23321] dump_stack+0x21c/0x280 [ 1155.380857][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1155.386571][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1155.391782][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1155.397576][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1155.403630][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1155.408835][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1155.414481][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1155.420555][T23321] ? _copy_from_user+0x1fd/0x300 [ 1155.425480][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1155.430666][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.435596][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.440703][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.445633][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.450149][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1155.455355][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1155.461237][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1155.466441][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1155.472060][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1155.477334][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1155.482088][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.486755][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1155.492546][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1155.497737][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.503812][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.510091][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.515278][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.520117][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.524633][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.530947][T23321] RIP: 0023:0xf7fe7549 [ 1155.535008][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1155.554601][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1155.563009][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1155.570993][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.578953][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.586933][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1155.594891][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.602852][T23321] Uninit was stored to memory at: [ 1155.607868][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.613591][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.618516][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.623615][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.628545][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.633038][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.637706][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.643762][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.649906][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.655113][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.659961][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.664453][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.670755][T23321] [ 1155.673082][T23321] Uninit was stored to memory at: [ 1155.678094][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.683796][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.688719][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.693816][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.698759][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.703251][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.707935][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.714007][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.720154][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.725342][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.730206][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.734705][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.741139][T23321] [ 1155.743454][T23321] Uninit was stored to memory at: [ 1155.748471][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.754180][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.759108][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.764208][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.769135][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.773627][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.778380][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.784441][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.790586][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.795806][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.800646][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.805139][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.811443][T23321] [ 1155.813753][T23321] Uninit was stored to memory at: [ 1155.818766][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.824472][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.829499][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.834599][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.839525][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.844035][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.848699][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.854753][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.861005][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.866313][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.871163][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.875663][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.881987][T23321] [ 1155.884415][T23321] Uninit was stored to memory at: [ 1155.889439][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.895173][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.900108][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.905229][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.910160][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.914653][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.919320][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.925394][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1155.931537][T23321] __do_fast_syscall_32+0x102/0x160 [ 1155.936726][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1155.941571][T23321] do_SYSENTER_32+0x73/0x90 [ 1155.946073][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.952377][T23321] [ 1155.954687][T23321] Uninit was stored to memory at: [ 1155.959699][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1155.965401][T23321] __msan_chain_origin+0x57/0xa0 [ 1155.970325][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1155.975423][T23321] get_compat_msghdr+0x108/0x2b0 [ 1155.980346][T23321] do_recvmmsg+0xdaf/0x2300 [ 1155.984837][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1155.989503][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1155.995582][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.001727][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.006916][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.011757][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.016252][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.022553][T23321] [ 1156.024863][T23321] Uninit was stored to memory at: [ 1156.029875][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1156.035598][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.040522][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.045624][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.050553][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.055045][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.059713][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.065767][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.071930][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.077117][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.081957][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.086448][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.092767][T23321] [ 1156.095082][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1156.101761][T23321] do_recvmmsg+0xbc/0x2300 [ 1156.106164][T23321] do_recvmmsg+0xbc/0x2300 [ 1156.413210][T23321] not chained 1030000 origins [ 1156.417936][T23321] CPU: 0 PID: 23321 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1156.426737][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.436788][T23321] Call Trace: [ 1156.440088][T23321] dump_stack+0x21c/0x280 [ 1156.444426][T23321] kmsan_internal_chain_origin+0x6f/0x130 [ 1156.450175][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1156.455429][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1156.461238][T23321] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1156.467342][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1156.472542][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1156.478180][T23321] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1156.484249][T23321] ? _copy_from_user+0x1fd/0x300 [ 1156.489186][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1156.494389][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.499354][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.504480][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.509421][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.513933][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1156.519137][T23321] ? kmsan_internal_check_memory+0xb1/0x520 [ 1156.525030][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1156.530228][T23321] ? kmsan_internal_set_origin+0x85/0xc0 [ 1156.535857][T23321] ? __msan_poison_alloca+0xe9/0x110 [ 1156.541145][T23321] ? __sys_recvmmsg+0xb5/0x5f0 [ 1156.545937][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.550658][T23321] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1156.556482][T23321] ? kmsan_get_metadata+0x116/0x180 [ 1156.561686][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.567772][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.573934][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.579137][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.583993][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.588524][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.594848][T23321] RIP: 0023:0xf7fe7549 [ 1156.598922][T23321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1156.618532][T23321] RSP: 002b:00000000f55c00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1156.626980][T23321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1156.634954][T23321] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.642941][T23321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1156.650926][T23321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1156.658925][T23321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.666918][T23321] Uninit was stored to memory at: [ 1156.671961][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1156.677679][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.682619][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.687730][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.692667][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.697172][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.701875][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.707962][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.714121][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.719321][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.724174][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.728678][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.734990][T23321] [ 1156.737308][T23321] Uninit was stored to memory at: [ 1156.742336][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1156.748055][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.753007][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.758117][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.763055][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.767563][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.772243][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.778320][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.784475][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.789792][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.794730][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.799346][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.805656][T23321] [ 1156.808044][T23321] Uninit was stored to memory at: [ 1156.813172][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1156.818943][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.823882][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.828999][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.833993][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.838500][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.843210][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.849278][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.855477][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.860769][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.865623][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.870243][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.876556][T23321] [ 1156.878876][T23321] Uninit was stored to memory at: [ 1156.883909][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1156.889636][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.894578][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.899691][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.904633][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.909141][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.913914][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.919986][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.926145][T23321] __do_fast_syscall_32+0x102/0x160 [ 1156.931346][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1156.936199][T23321] do_SYSENTER_32+0x73/0x90 [ 1156.940750][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.947066][T23321] [ 1156.949386][T23321] Uninit was stored to memory at: [ 1156.954431][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1156.960151][T23321] __msan_chain_origin+0x57/0xa0 [ 1156.965090][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1156.970199][T23321] get_compat_msghdr+0x108/0x2b0 [ 1156.975133][T23321] do_recvmmsg+0xdaf/0x2300 [ 1156.979639][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1156.984320][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1156.990477][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1156.996658][T23321] __do_fast_syscall_32+0x102/0x160 [ 1157.001905][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1157.006876][T23321] do_SYSENTER_32+0x73/0x90 [ 1157.011387][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.017703][T23321] [ 1157.020022][T23321] Uninit was stored to memory at: [ 1157.025048][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1157.030767][T23321] __msan_chain_origin+0x57/0xa0 [ 1157.035703][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1157.040924][T23321] get_compat_msghdr+0x108/0x2b0 [ 1157.045866][T23321] do_recvmmsg+0xdaf/0x2300 [ 1157.050371][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1157.055050][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.061135][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.067290][T23321] __do_fast_syscall_32+0x102/0x160 [ 1157.072491][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1157.077353][T23321] do_SYSENTER_32+0x73/0x90 [ 1157.081858][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.088192][T23321] [ 1157.090513][T23321] Uninit was stored to memory at: [ 1157.095538][T23321] kmsan_internal_chain_origin+0xad/0x130 [ 1157.101253][T23321] __msan_chain_origin+0x57/0xa0 [ 1157.106188][T23321] __get_compat_msghdr+0x6db/0x9d0 [ 1157.111391][T23321] get_compat_msghdr+0x108/0x2b0 [ 1157.116336][T23321] do_recvmmsg+0xdaf/0x2300 [ 1157.120843][T23321] __sys_recvmmsg+0x340/0x5f0 [ 1157.125549][T23321] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.131615][T23321] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.137769][T23321] __do_fast_syscall_32+0x102/0x160 [ 1157.142971][T23321] do_fast_syscall_32+0x6a/0xc0 [ 1157.147823][T23321] do_SYSENTER_32+0x73/0x90 [ 1157.152331][T23321] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.158645][T23321] [ 1157.160994][T23321] Local variable ----msg_sys@do_recvmmsg created at: [ 1157.167670][T23321] do_recvmmsg+0xbc/0x2300 [ 1157.172090][T23321] do_recvmmsg+0xbc/0x2300 [ 1157.308776][T23317] not chained 1040000 origins [ 1157.313509][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1157.322263][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.332314][T23317] Call Trace: [ 1157.335612][T23317] dump_stack+0x21c/0x280 [ 1157.339971][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1157.345697][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1157.350900][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1157.356710][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1157.362775][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1157.367974][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1157.373615][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1157.379685][T23317] ? _copy_from_user+0x1fd/0x300 [ 1157.384621][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1157.389818][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.394756][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.399882][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.404830][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.409342][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1157.415416][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1157.420616][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1157.426509][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1157.431706][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1157.437333][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1157.442621][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1157.447388][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.452068][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1157.457944][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1157.463146][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.469219][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.475387][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.480587][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.485471][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.489979][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.496297][T23317] RIP: 0023:0xf7fe7549 [ 1157.500366][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1157.519980][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1157.528402][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1157.536372][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1157.544344][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1157.552315][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1157.560281][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1157.568247][T23317] Uninit was stored to memory at: [ 1157.573276][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1157.578996][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.583938][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.589046][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.593984][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.598487][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.603163][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.609229][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.615387][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.620589][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.625462][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.630022][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.636332][T23317] [ 1157.638681][T23317] Uninit was stored to memory at: [ 1157.643717][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1157.649433][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.654370][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.659479][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.664413][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.668919][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.673602][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.679670][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.685827][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.691031][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.695886][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.700398][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.706707][T23317] [ 1157.709026][T23317] Uninit was stored to memory at: [ 1157.714073][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1157.719800][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.724745][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.729858][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.734796][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.739300][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.743980][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.750050][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.756206][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.761496][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.766421][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.770931][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.777336][T23317] [ 1157.779657][T23317] Uninit was stored to memory at: [ 1157.784682][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1157.790430][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.795365][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.800474][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.805411][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.809987][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.814662][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.820731][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.826921][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.832123][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.836976][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.841490][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.847804][T23317] [ 1157.850124][T23317] Uninit was stored to memory at: [ 1157.855149][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1157.860869][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.865844][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.870966][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.875907][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.880508][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.885187][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.891259][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.897415][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.902615][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.907466][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.911974][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.918285][T23317] [ 1157.920622][T23317] Uninit was stored to memory at: [ 1157.925646][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1157.931366][T23317] __msan_chain_origin+0x57/0xa0 [ 1157.936400][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1157.941513][T23317] get_compat_msghdr+0x108/0x2b0 [ 1157.946541][T23317] do_recvmmsg+0xdaf/0x2300 [ 1157.951055][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1157.955727][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1157.961785][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1157.967931][T23317] __do_fast_syscall_32+0x102/0x160 [ 1157.973119][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1157.977979][T23317] do_SYSENTER_32+0x73/0x90 [ 1157.982476][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.988897][T23317] [ 1157.991211][T23317] Uninit was stored to memory at: [ 1157.996250][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1158.001956][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.006883][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.011985][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.016916][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.021410][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.026100][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.032156][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.038297][T23317] __do_fast_syscall_32+0x102/0x160 [ 1158.043486][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1158.048340][T23317] do_SYSENTER_32+0x73/0x90 [ 1158.052947][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.059250][T23317] [ 1158.061565][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1158.068227][T23317] do_recvmmsg+0xbc/0x2300 [ 1158.072633][T23317] do_recvmmsg+0xbc/0x2300 [ 1158.414748][T23317] not chained 1050000 origins [ 1158.419479][T23317] CPU: 1 PID: 23317 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 1158.428229][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.438281][T23317] Call Trace: [ 1158.441583][T23317] dump_stack+0x21c/0x280 [ 1158.445956][T23317] kmsan_internal_chain_origin+0x6f/0x130 [ 1158.451684][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1158.456889][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1158.462700][T23317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1158.468765][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1158.474056][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1158.479695][T23317] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1158.485859][T23317] ? _copy_from_user+0x1fd/0x300 [ 1158.490815][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1158.496018][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.500960][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.506079][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.511028][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.515531][T23317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1158.521635][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1158.526845][T23317] ? kmsan_internal_check_memory+0xb1/0x520 [ 1158.532764][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1158.537966][T23317] ? kmsan_internal_set_origin+0x85/0xc0 [ 1158.543602][T23317] ? __msan_poison_alloca+0xe9/0x110 [ 1158.548895][T23317] ? __sys_recvmmsg+0xb5/0x5f0 [ 1158.553674][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.558356][T23317] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1158.564163][T23317] ? kmsan_get_metadata+0x116/0x180 [ 1158.569397][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.575472][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.581631][T23317] __do_fast_syscall_32+0x102/0x160 [ 1158.586861][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1158.591721][T23317] do_SYSENTER_32+0x73/0x90 [ 1158.596230][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.602554][T23317] RIP: 0023:0xf7fe7549 [ 1158.606622][T23317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1158.626313][T23317] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1158.634842][T23317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 1158.642938][T23317] RDX: 00000000fffffc5b RSI: 0000000000000000 RDI: 0000000000000000 [ 1158.650921][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.658896][T23317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1158.666871][T23317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.674848][T23317] Uninit was stored to memory at: [ 1158.679879][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1158.685596][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.690541][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.695653][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.700593][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.705101][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.709797][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.715869][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.722027][T23317] __do_fast_syscall_32+0x102/0x160 [ 1158.727230][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1158.732081][T23317] do_SYSENTER_32+0x73/0x90 [ 1158.736582][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.742892][T23317] [ 1158.745211][T23317] Uninit was stored to memory at: [ 1158.750236][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1158.755952][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.760897][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.766008][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.770952][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.775456][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.780132][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.786196][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.792346][T23317] __do_fast_syscall_32+0x102/0x160 [ 1158.797540][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1158.802389][T23317] do_SYSENTER_32+0x73/0x90 [ 1158.806897][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.813209][T23317] [ 1158.815526][T23317] Uninit was stored to memory at: [ 1158.820547][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1158.826291][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.831229][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.836340][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.841348][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.845853][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.850533][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.856606][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.862966][T23317] __do_fast_syscall_32+0x102/0x160 [ 1158.868177][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1158.873034][T23317] do_SYSENTER_32+0x73/0x90 [ 1158.877544][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.883857][T23317] [ 1158.886176][T23317] Uninit was stored to memory at: [ 1158.891206][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1158.896923][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.901862][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.906974][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.911932][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.916464][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.921143][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.927214][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1158.933368][T23317] __do_fast_syscall_32+0x102/0x160 [ 1158.938567][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1158.943419][T23317] do_SYSENTER_32+0x73/0x90 [ 1158.947946][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.954274][T23317] [ 1158.956609][T23317] Uninit was stored to memory at: [ 1158.961638][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1158.967357][T23317] __msan_chain_origin+0x57/0xa0 [ 1158.972295][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1158.977403][T23317] get_compat_msghdr+0x108/0x2b0 [ 1158.982351][T23317] do_recvmmsg+0xdaf/0x2300 [ 1158.986855][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1158.991629][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1158.997697][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.003853][T23317] __do_fast_syscall_32+0x102/0x160 [ 1159.009057][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1159.013909][T23317] do_SYSENTER_32+0x73/0x90 [ 1159.018415][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.024729][T23317] [ 1159.027048][T23317] Uninit was stored to memory at: [ 1159.032071][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1159.037787][T23317] __msan_chain_origin+0x57/0xa0 [ 1159.042726][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1159.047834][T23317] get_compat_msghdr+0x108/0x2b0 [ 1159.052770][T23317] do_recvmmsg+0xdaf/0x2300 [ 1159.057277][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1159.061958][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.068045][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.074201][T23317] __do_fast_syscall_32+0x102/0x160 [ 1159.079399][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1159.084243][T23317] do_SYSENTER_32+0x73/0x90 [ 1159.088750][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.095060][T23317] [ 1159.097378][T23317] Uninit was stored to memory at: [ 1159.102401][T23317] kmsan_internal_chain_origin+0xad/0x130 [ 1159.108120][T23317] __msan_chain_origin+0x57/0xa0 [ 1159.113053][T23317] __get_compat_msghdr+0x6db/0x9d0 [ 1159.118211][T23317] get_compat_msghdr+0x108/0x2b0 [ 1159.123149][T23317] do_recvmmsg+0xdaf/0x2300 [ 1159.127651][T23317] __sys_recvmmsg+0x340/0x5f0 [ 1159.132330][T23317] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1159.138400][T23317] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1159.144567][T23317] __do_fast_syscall_32+0x102/0x160 [ 1159.149766][T23317] do_fast_syscall_32+0x6a/0xc0 [ 1159.154624][T23317] do_SYSENTER_32+0x73/0x90 [ 1159.159132][T23317] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.165460][T23317] [ 1159.167781][T23317] Local variable ----msg_sys@do_recvmmsg created at: [ 1159.174459][T23317] do_recvmmsg+0xbc/0x2300 [ 1159.178877][T23317] do_recvmmsg+0xbc/0x2300 12:34:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:34:06 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x16fe40) 12:34:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x47}]}) 12:34:06 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x24801, 0x0) 12:34:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @remote}, 0x80) 12:34:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x401) syz_genetlink_get_family_id$gtp(&(0x7f0000004540)='gtp\x00') write$evdev(r0, &(0x7f0000001380)=[{{0x0, 0x2710}}], 0xfffffd3a) [ 1159.993382][T20541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:34:07 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x80108906, 0x0) 12:34:07 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:07 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1160.618566][T20541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:34:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x4}]}]}, 0x30}}, 0x0) [ 1161.352216][T20541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:34:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:34:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) [ 1161.478419][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1161.487877][T23489] tipc: Invalid UDP bearer configuration [ 1161.487966][T23489] tipc: Enabling of bearer rejected, failed to enable media [ 1161.959327][T20541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.078128][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1162.087520][T23494] tipc: Invalid UDP bearer configuration [ 1162.087788][T23494] tipc: Enabling of bearer rejected, failed to enable media [ 1165.941662][T20541] IPVS: stopping master sync thread 23189 ... [ 1166.963911][T20541] device bond0 left promiscuous mode [ 1166.969577][T20541] device bond_slave_0 left promiscuous mode [ 1166.976030][T20541] device bond_slave_1 left promiscuous mode [ 1166.983274][T20541] bridge1: port 1(bond0) entered disabled state [ 1167.105102][T20541] device hsr_slave_0 left promiscuous mode [ 1167.134958][T20541] device hsr_slave_1 left promiscuous mode [ 1167.159485][T20541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.167174][T20541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.190767][T20541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.198655][T20541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.232247][T20541] device bridge_slave_1 left promiscuous mode [ 1167.239236][T20541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.279135][T20541] device bridge_slave_0 left promiscuous mode [ 1167.285906][T20541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.382278][T20541] device veth1_macvtap left promiscuous mode [ 1167.388678][T20541] device veth0_macvtap left promiscuous mode [ 1167.394830][T20541] device veth1_vlan left promiscuous mode [ 1167.400965][T20541] device veth0_vlan left promiscuous mode [ 1173.087950][T20541] team0 (unregistering): Port device team_slave_1 removed [ 1173.112016][T20541] team0 (unregistering): Port device team_slave_0 removed [ 1173.130127][T20541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.150020][T20541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.231407][T20541] bond0 (unregistering): Released all slaves [ 1173.307737][T23552] IPVS: ftp: loaded support on port[0] = 21 [ 1173.552807][T23552] chnl_net:caif_netlink_parms(): no params data found [ 1173.685012][T23552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.693368][T23552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.703912][T23552] device bridge_slave_0 entered promiscuous mode [ 1173.731055][ T9591] Bluetooth: hci0: command 0x0409 tx timeout [ 1173.736344][T23552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.745021][T23552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.755296][T23552] device bridge_slave_1 entered promiscuous mode [ 1173.841279][T23552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.866943][T23552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.934183][T23552] team0: Port device team_slave_0 added [ 1173.955393][T23552] team0: Port device team_slave_1 added [ 1174.016423][T23552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.024599][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.050955][T23552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.066946][T23552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.074332][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.101738][T23552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.170889][T23552] device hsr_slave_0 entered promiscuous mode [ 1174.179088][T23552] device hsr_slave_1 entered promiscuous mode [ 1174.599044][T23552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.627736][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1174.637008][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1174.655823][T23552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.672304][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1174.682624][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1174.691836][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.699154][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.712882][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1174.741999][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1174.753532][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1174.763004][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.770256][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.779814][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1174.802386][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1174.826088][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1174.836195][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1174.850589][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1174.867659][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1174.878124][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1174.899707][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1174.910079][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1174.938266][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1174.948198][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1174.961486][T23552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1174.998418][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1175.007150][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1175.037664][T23552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.139927][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1175.150175][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1175.199126][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1175.208448][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1175.220029][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1175.229436][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1175.246956][T23552] device veth0_vlan entered promiscuous mode [ 1175.270536][T23552] device veth1_vlan entered promiscuous mode [ 1175.317490][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1175.327181][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1175.338073][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1175.348368][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1175.382133][T23552] device veth0_macvtap entered promiscuous mode [ 1175.391328][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1175.409945][T23552] device veth1_macvtap entered promiscuous mode [ 1175.486934][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1175.497960][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.508300][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1175.518965][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.529120][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1175.539788][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.550889][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1175.561815][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.571874][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1175.582536][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.595133][T23552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.609594][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1175.620362][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1175.636955][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1175.649850][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.660469][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1175.671315][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.681503][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1175.692241][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.702527][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1175.713413][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.723652][T23552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1175.734506][T23552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.748747][T23552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.760399][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1175.770465][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1175.826120][ T2964] Bluetooth: hci0: command 0x041b tx timeout [ 1176.075833][T12443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.084510][T12443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.096841][T23458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1176.173095][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.181282][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.190261][T23458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:34:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}]}}, &(0x7f0000000280)=""/172, 0x32, 0xac, 0x1}, 0x20) 12:34:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 12:34:22 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 12:34:22 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "781433e9ee2a506e75"}]}, 0x24}}, 0x0) 12:34:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x2003) 12:34:22 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0xc0045878, 0x0) 12:34:23 executing program 1: r0 = socket(0x1e, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x20000354) 12:34:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000180)) 12:34:23 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 12:34:23 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f00000002c0)) 12:34:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x95, &(0x7f0000000080)=""/149, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:23 executing program 0: r0 = socket(0x1e, 0x2, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000029c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002a00)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, r1}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000029c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000002a00)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x0, 0x0, 0x4, 0x0, 0xb0, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000026c0)={'syztnl2\x00', &(0x7f0000002640)={'syztnl0\x00', 0x0, 0x4, 0x44, 0x6, 0x80010, 0x60, @mcast1, @dev={0xfe, 0x80, [], 0x20}, 0x20, 0x7800, 0x0, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c80)={&(0x7f0000003600)=ANY=[@ANYBLOB="c0030000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="0400028000000100000001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000000030003000000000004000600000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="dc0102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400f218a9043600000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000370003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004005fc5000008000600", @ANYRES32=0x0, @ANYBLOB="00000100240401006c625f74785f6d6574686f6400000000000000400ab1dbd78b69060000000000680000000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004008000000107000000090003020800000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x3c0}, 0x1, 0x0, 0x0, 0x8880}, 0x805) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf251100000008000600", @ANYRES32=0x0, @ANYBLOB="0a000900ffffffffffff000008003b0045000000050029000100000008002b00e4000042b68ced000600000008002c007d000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x901}, 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, 0x0) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x104) 12:34:23 executing program 3: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x32032, 0xffffffffffffffff, 0x0) 12:34:23 executing program 1: r0 = socket(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x4020940d, &(0x7f0000000840)={'batadv0\x00'}) 12:34:24 executing program 2: sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8b) 12:34:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 1177.618701][T23813] tc_dump_action: action bad kind 12:34:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) [ 1177.746337][T23813] tc_dump_action: action bad kind [ 1177.892824][ T2964] Bluetooth: hci0: command 0x040f tx timeout 12:34:24 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 12:34:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r6, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="d202330080010000f50111000000080211"], 0x2f0}}, 0x0) 12:34:24 executing program 1: r0 = socket(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000000840)={'batadv0\x00'}) 12:34:24 executing program 0: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8914, &(0x7f0000000000)) 12:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x15, r1, 0x9, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x0) 12:34:24 executing program 4: r0 = socket(0x1e, 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x10f, 0x1, 0x0, 0x0) [ 1178.588144][T23842] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 12:34:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x8910, &(0x7f00000003c0)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @l2={0x1f, 0x0, @none}, @ipx={0x4, 0x0, 0x0, "b59442e9178a"}}) 12:34:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x86732a940dbd7f3b}, 0x14}}, 0x0) [ 1178.744396][T23844] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 12:34:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x38}}, 0x0) 12:34:25 executing program 0: epoll_create(0x5) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x2}, &(0x7f0000000200)={0x9}, 0x0, 0x0) 12:34:25 executing program 2: r0 = socket(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x10f, 0x6, 0x0, 0x0) 12:34:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x28, 0x0, &(0x7f0000000180)) 12:34:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x40) 12:34:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x95, &(0x7f0000000080)=""/149, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:26 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x0, 0x0) r1 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 12:34:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="84", 0x1, 0x4008044, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) 12:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)={0x1174, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x10a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c746da960620df7864689710b5f7ede6ef945d1e4cfe"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fd629b2521deb81740533507596f2a4a3769bf4069695321306d52a5bcf94b03e5"}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x11}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x1174}}, 0x0) 12:34:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/135, &(0x7f0000000000)=0xfffffffffffffd3c) [ 1179.974661][ T2964] Bluetooth: hci0: command 0x0419 tx timeout 12:34:26 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x10) 12:34:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 12:34:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x97, 0x2}, 0xe) [ 1180.039056][T23873] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1180.047802][T23873] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 12:34:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 1180.201311][T23878] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1180.209777][T23878] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 12:34:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) 12:34:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x11, r1, 0x1}, 0x14}}, 0x0) 12:34:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000280)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) 12:34:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, 0x0, 0x0) 12:34:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 12:34:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xe, 0x0, &(0x7f0000000180)) 12:34:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001640)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hopopts={{0x18}}, @hoplimit_2292={{0x14}}], 0x30}, 0x80014) 12:34:28 executing program 2: socket(0x11, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) 12:34:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, 0x0, 0x10) 12:34:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 12:34:28 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x103000, 0x0) 12:34:28 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) close(r0) 12:34:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80108906, 0x0) 12:34:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x4c, 0x0, 0x0) 12:34:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x104) 12:34:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 12:34:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x6, &(0x7f0000000000), 0x4) 12:34:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)) 12:34:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x42, &(0x7f0000000000), 0x4) 12:34:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000000)}) 12:34:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @ipv4}}) 12:34:29 executing program 2: getpid() timer_create(0xfffffffe, 0x0, &(0x7f0000000100)) 12:34:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d04, 0xfffffffffffffff7]}) 12:34:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x12, 0x0, &(0x7f0000000180)) 12:34:29 executing program 4: getresuid(&(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00)) 12:34:29 executing program 5: setgroups(0x1, &(0x7f0000001980)=[0xee00]) 12:34:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x1}, 0x40) 12:34:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80046d03, 0x0) 12:34:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d04, 0xfffffffffffffff7]}) 12:34:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000b80)={0x7, 0x0, 0x0, 0x0, 0x1000}, 0x40) 12:34:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x400c744d, 0x0) 12:34:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) 12:34:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1600bd7a, 0x0, 0x0) 12:34:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 12:34:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d04, 0xfffffffffffffff7]}) 12:34:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 12:34:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x48, 0x0, 0x0) 12:34:31 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000ac0), 0x40) 12:34:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3368", 0xf895}], 0x1) 12:34:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000008080), &(0x7f00000080c0)={0x8}, 0x0, 0x0, 0x0) 12:34:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d04, 0xfffffffffffffff7]}) 12:34:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2000000, 0x0) 12:34:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4b, 0x0, 0x0) 12:34:32 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mreq(r0, 0x29, 0x12, &(0x7f0000004000)={@mcast2}, 0x14) 12:34:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty, 0x2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@dstopts_2292={{0x14}}, @rthdr_2292={{0x14}}], 0x28}}], 0x2, 0x800) 12:34:32 executing program 1: openat$urandom(0xffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8c0, 0x0) 12:34:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3368", 0xf895}], 0x1) 12:34:32 executing program 4: r0 = io_uring_setup(0x2a73, &(0x7f0000000080)={0x0, 0xc09b}) ioctl$FIONCLEX(r0, 0x5450) 12:34:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2000000, 0x0) 12:34:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x17, 0x0, &(0x7f0000000180)) 12:34:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1600bd81, 0x0, 0x0) 12:34:33 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180), 0x0) 12:34:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2000000, 0x0) 12:34:33 executing program 0: syz_io_uring_setup(0x79da, &(0x7f0000000100), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x73e5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 12:34:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x3, 0x101241) write$cgroup_type(r0, 0x0, 0x0) 12:34:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) r1 = memfd_create(&(0x7f0000000140)='\xbb\x02\xb1\xed\x97\xdb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xe8HB\x00\x9e\x15\x9e\xc9\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jt\xea\xf9l\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8d40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c000b1798eb12c765639f640000", @ANYRES16, @ANYBLOB="02002abd7000fcdbdf257c00000008000300", @ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x24044010) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2678fff347746aa1d9d240bcae3dcc010a2dab67", @ANYRES16, @ANYBLOB="000029bd7000fddbdf25130000000c009900090000004a0000000500e400000000000500c2008000000006001200ff"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 12:34:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x4a, 0x0, 0x0) 12:34:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3368", 0xf895}], 0x1) 12:34:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2000000, 0x0) 12:34:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) 12:34:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x4e, 0x0, 0x0) 12:34:34 executing program 1: add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "b9d3ec31e2a77849dcd77d463acfcc960f78012bfbe23178c8a26b5e5502499fb4425f8deb01bb99db8860e3fca10ab78d1a55fc83775b92c521bd07042587f8"}, 0x48, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "b9d3ec31e2a77849dcd77d463acfcc960f78012bfbe23178c8a26b5e5502499fb4425f8deb01bb99db8860e3fca10ab78d1a55fc83775b92c521bd07042587f8"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x29, r0) 12:34:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000980)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000cb"], &(0x7f0000000900)=0xef) 12:34:35 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0xb, 0x0, 0x0) 12:34:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty, 0x2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x800) 12:34:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3368", 0xf895}], 0x1) 12:34:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x123641) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x8800000) 12:34:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), 0x4) 12:34:35 executing program 1: write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=0xffffffffffffffff, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100", 0x6}], 0x1) timerfd_create(0x9, 0x800) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x1f, 0xbcf, 0xf, "6f5311b152166d1297d6caaa60ad112c350067"}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) 12:34:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) arch_prctl$ARCH_GET_FS(0x1003, 0x0) bpf$BPF_GET_MAP_INFO(0x2, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b336c", 0xf895}], 0x1) 12:34:35 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) 12:34:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xce, 0xfffffffffffffff7]}) 12:34:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x9, 0x3, &(0x7f00000020c0)=@framed, &(0x7f0000002100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 12:34:36 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_delete(0x0) 12:34:36 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) 12:34:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x13, 0x0, &(0x7f0000000180)) 12:34:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xce, 0xfffffffffffffff7]}) 12:34:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x20000000}, 0xc) 12:34:37 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0xd, 0x0, &(0x7f0000000180)) 12:34:37 executing program 3: socket$inet(0x2, 0xa, 0x0) socket$packet(0x11, 0x3, 0x300) 12:34:37 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x668d, &(0x7f0000000940)) 12:34:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) 12:34:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xce, 0xfffffffffffffff7]}) 12:34:37 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5416, 0x8bb0000) 12:34:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000000), 0x4) 12:34:37 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+'}, 0x16, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x80000000}, {0x6e3, 0x1000000}]}, 0x18, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x0) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', ')$#@\\\x00'}, &(0x7f0000000380)=':^)\xc5@{/\x80\x10./\x00', 0xc, 0x1) 12:34:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x300}, 0x0) 12:34:38 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) 12:34:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x43, 0x0, 0x0) 12:34:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xce, 0xfffffffffffffff7]}) 12:34:38 executing program 1: io_uring_setup(0x403a, &(0x7f00000000c0)={0x0, 0x0, 0x20}) 12:34:38 executing program 3: r0 = syz_io_uring_setup(0x96e, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, [], [{}, {}]}, 0x2) 12:34:38 executing program 2: add_key(&(0x7f0000000200)='keyring\x00', 0x0, &(0x7f0000000280)="ef", 0x1, 0xffffffffffffffff) 12:34:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0xc020660b, 0x0) 12:34:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:34:39 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYBLOB='y@\x00?\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@local, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x0, @usage=0x1, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x0, [0x66, 0x0, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x0, 0x8]}, {0x0, 0x9}}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:39 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000ac0), 0x40) 12:34:39 executing program 3: socketpair(0x1, 0x0, 0x180, &(0x7f00000005c0)) 12:34:39 executing program 2: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x9, 0x1f, 0x0) 12:34:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)={0x1b}, 0x40) 12:34:39 executing program 5: setreuid(0xee01, 0x0) setreuid(0x0, 0x0) [ 1193.219322][ T32] audit: type=1800 audit(1609418079.767:146): pid=24193 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15837 res=0 errno=0 12:34:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) 12:34:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x6, 0x0, &(0x7f0000000180)) 12:34:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20) 12:34:40 executing program 2: socket$inet6(0xa, 0x0, 0xe01) 12:34:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:34:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x8980, 0x0) 12:34:40 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002c00270d0000000003dbdf25000000009d7e8d34a013f3b5da888526223a2b65c425d0b07a1cd049f6e8d028ff5e91e2624f81c1d874aeebb354e7515b9b8a72e2ab8cb6c6b88df699af3130b108cae75c67750001aeae0046c45a93fc99fa369783e548f4d4b8729f6d93df7f7a4ddbebb6ed59dc1de0d6182e8903d94284ecd3c26096cc24745b44d6574b2a633123f9f0317b363e0d02a18c9ddbbee769c4bb2387e8055d764837948f9559f549b40a62653faa627dd2cded051dd0ce4ef8f88f3f925bb82a20fd32c9ce58a34cb2fc787ef9255f9acc24d4d0c73f4c8d2898a4ca273e8aced2e64ce6cb14319f15d556ab9232974a02b80ee399168b8fe4756efb7f7344d7d27d45107e1032d30b", @ANYBLOB='y@\x00?\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@local, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x0, @usage=0x1, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x0, [0x66, 0x0, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x0, 0x8]}, {0x0, 0x9}}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:40 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) 12:34:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000004000)={@mcast2}, 0x14) 12:34:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x38, 0x0, 0x0) 12:34:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) [ 1194.764947][ T32] audit: type=1800 audit(1609418081.316:147): pid=24225 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15946 res=0 errno=0 12:34:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) sendmmsg$inet6(r0, &(0x7f0000007580)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x14, 0x29, 0x37, {0x0, 0x2}}}], 0x14}}], 0x1, 0x0) 12:34:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x123641) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) 12:34:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000300)="9e", 0x1}], 0x0, &(0x7f0000000580)) 12:34:42 executing program 2: pselect6(0xe, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:34:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) r1 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8d40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='!', 0x1}], 0x1, 0x40ee1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@remote, 0x4e24, 0x7, 0x4e21, 0x7, 0x0, 0x80, 0x0, 0x67, 0x0, r4}, {0x0, 0x7a1388a0, 0x401, 0x40, 0x100000001, 0x6, 0x3, 0x1a2}, {0xfffffffffffffdf3, 0x400, 0x1, 0x91e}, 0xfffffff7, 0x6e6bbe, 0x2, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d3, 0x33}, 0xa, @in6=@private0, 0x3505, 0x1, 0x0, 0x9, 0x7, 0x1, 0x9}}, 0xe4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c000b1798eb12c765639f640000", @ANYRES16, @ANYBLOB="02002abd7000fcdbdf257c00000008000300", @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x24044010) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2678fff347746aa1d9d240bcae3dcc010a2dab67", @ANYRES16, @ANYBLOB="000029bd7000fddbdf25130000000c009900090000004a0000000500e400000000000500c2008000000006001200ff030000"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 12:34:42 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3c, 0x0, 0x0) 12:34:42 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYBLOB='y@\x00?\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@local, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x0, @usage=0x1, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x0, [0x66, 0x0, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x0, 0x8]}, {0x0, 0x9}}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x6}, 0x40) 12:34:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000140)=@proc, 0xc) 12:34:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x24, &(0x7f0000000180), 0x4) [ 1196.384923][ T32] audit: type=1800 audit(1609418082.936:148): pid=24262 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15961 res=0 errno=0 12:34:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x40) 12:34:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) sendmmsg$inet6(r0, &(0x7f0000007580)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x14, 0x29, 0x1600bd74}}], 0x14}}], 0x1, 0x0) 12:34:43 executing program 3: r0 = syz_io_uring_setup(0x15f7, &(0x7f0000000980)={0x0, 0xfac1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) syz_genetlink_get_family_id$devlink(0x0) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000010c0)=r1, 0x1) 12:34:43 executing program 5: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda08b5e4577124d1a2e21da765cd1ce2356a8f856f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65c6a2b2e441a0e0c44a3d9abeb7d90f000000000e077d0d67096da85a6d22c36fac7505a35892211b5194d55e0ad396b242ac56b00fbd89c9ff98"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+'}, 0x16, 0x0) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000000)) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x80000000, 0x4}, {0x6e3, 0x1000000}]}, 0x18, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0xc0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x372c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x38, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x50}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe01}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x2400a040) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', ')$#@\\\x00'}, &(0x7f0000000380)=':^)\xc5@{/\x80\x10./\x00', 0xc, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) 12:34:43 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b334b", 0xf895}], 0x1) 12:34:43 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x16, 0x0, &(0x7f0000000180)) [ 1197.515741][T24287] ptrace attach of "/root/syz-executor.5"[24285] was attempted by "/root/syz-executor.5"[24287] 12:34:44 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYBLOB='y@\x00?\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@local, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x0, @usage=0x1, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x0, [0x66, 0x0, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x0, 0x8]}, {0x0, 0x9}}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 12:34:44 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 12:34:44 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x46, @usage=0x1, 0x0, 0x8, [0x3, 0x0, 0x7fff, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x2, [0x66, 0xffffffffffffffff, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage=0x1ff, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x8]}, {0x800000000000000, 0x9}}) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x10, 0x3, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:44 executing program 2: syz_io_uring_setup(0x550f, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1198.068226][ T32] audit: type=1800 audit(1609418084.616:149): pid=24298 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15933 res=0 errno=0 12:34:44 executing program 0: sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0) ptrace$setsig(0x4203, 0x0, 0x763f, &(0x7f0000000300)={0x23, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5}]}) syz_open_dev$vcsa(0x0, 0x0, 0x0) [ 1198.515000][ T32] audit: type=1800 audit(1609418085.066:150): pid=24307 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15977 res=0 errno=0 12:34:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000001040)=0x24) 12:34:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [], @multicast1}, 0x0, 0x1}, 0x20) 12:34:45 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x46, @usage=0x1, 0x0, 0x8, [0x3, 0x0, 0x7fff, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x2, [0x66, 0xffffffffffffffff, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage=0x1ff, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x8]}, {0x800000000000000, 0x9}}) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x10, 0x3, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:45 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x621417b5e26bbd9c, 0x0, 0x0}, 0x20) 12:34:45 executing program 1: r0 = getpgrp(0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:34:46 executing program 4: r0 = io_uring_setup(0x6fec, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) 12:34:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0xa, 0x4) [ 1199.500059][ T32] audit: type=1800 audit(1609418086.056:151): pid=24331 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15842 res=0 errno=0 12:34:46 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x46, @usage=0x1, 0x0, 0x8, [0x3, 0x0, 0x7fff, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x2, [0x66, 0xffffffffffffffff, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage=0x1ff, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x8]}, {0x800000000000000, 0x9}}) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x10, 0x3, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:46 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x14, 0x0, &(0x7f0000000180)) 12:34:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@dstopts_2292={{0x14}}], 0x14}}], 0x1, 0x0) 12:34:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x20}, 0x40) [ 1200.286076][ T32] audit: type=1800 audit(1609418086.835:152): pid=24351 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15954 res=0 errno=0 12:34:47 executing program 0: syz_io_uring_setup(0x167, &(0x7f0000000000)={0x0, 0x843f, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4e31, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:34:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 12:34:47 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x5, @struct={0xfffff079, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x46, @usage=0x1, 0x0, 0x8, [0x3, 0x0, 0x7fff, 0x200, 0x10000, 0x5155]}, {0x5, @struct={0xcce, 0x6}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x40, @usage=0xffff, 0xfffffffa, 0x2, [0x66, 0xffffffffffffffff, 0x9, 0x3ff, 0x3, 0xe1]}, {0x1ff, @usage=0x1ff, 0x0, 0x7, 0x3ff, 0x7, 0xe6a, 0x72bb0249, 0x400, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x8]}, {0x800000000000000, 0x9}}) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket(0x10, 0x3, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:47 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x1600bd77, 0x0, &(0x7f0000000180)) 12:34:47 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a00)={0x9, 0x3, {0x0, @struct={0x0, 0xffffffff}, 0x0, 0x1, 0x7ff, 0x2, 0x4, 0x100, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5155]}, {0x5, @struct={0xcce}, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x40, @usage, 0x0, 0x0, [0x0, 0x0, 0x9, 0x3ff]}, {0x1ff, @usage, 0x0, 0x7, 0x3ff, 0x0, 0x0, 0x72bb0249, 0x0, @struct={0x5, 0x9}, 0x0, 0x0, [0xaa50, 0x7fffffff, 0x4, 0x2, 0x7fff, 0x8]}, {0x800000000000000, 0x9}}) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xc0010015, 0xfffffffffffffff7]}) [ 1200.905067][ T32] audit: type=1800 audit(1609418087.445:153): pid=24362 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15934 res=0 errno=0 12:34:47 executing program 4: syz_io_uring_setup(0x15f7, &(0x7f0000000980)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) [ 1201.225746][ T32] audit: type=1800 audit(1609418087.775:154): pid=24373 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15986 res=0 errno=0 12:34:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0xb, &(0x7f0000000000), 0x4) 12:34:47 executing program 2: add_key(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) [ 1201.470000][T24383] kvm [24377]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xfffffffffffffeb7 12:34:48 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4bfb, &(0x7f00000000c0)) 12:34:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x18, &(0x7f0000000000), 0x4) 12:34:48 executing program 4: r0 = openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)) 12:34:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xc0010015, 0xfffffffffffffff7]}) 12:34:48 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) 12:34:48 executing program 2: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100)) 12:34:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 12:34:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x10000}, 0x40) 12:34:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4b, &(0x7f0000000000), 0x4) [ 1202.363750][T24406] kvm [24405]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xfffffffffffffeb7 [ 1202.579300][T24413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1202.702952][T24422] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 12:34:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xc0010015, 0xfffffffffffffff7]}) 12:34:49 executing program 2: timer_create(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) [ 1202.765535][T24413] overlayfs: failed to resolve './file0': -2 12:34:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000018c0)={'ip6gre0\x00', &(0x7f0000001840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @loopback, 0x0, 0x7800}}) 12:34:49 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x31, 0x0, &(0x7f0000000180)) 12:34:49 executing program 4: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) 12:34:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000140)=@proc={0x7}, 0xc) 12:34:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000300)=ANY=[]) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 12:34:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x4c, &(0x7f0000000180), 0x4) 12:34:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0xc0010015, 0xfffffffffffffff7]}) 12:34:50 executing program 0: r0 = syz_io_uring_setup(0x15f7, &(0x7f0000000980)={0x0, 0xfac1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:34:50 executing program 4: r0 = openat$vcs(0xffffff9c, &(0x7f0000002a40)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)) [ 1203.915168][T24444] kvm [24441]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xfffffffffffffeb7 [ 1203.999891][T24445] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 12:34:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f00000003c0)}, 0x30) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b336c", 0xf895}], 0x1) 12:34:50 executing program 3: bpf$MAP_CREATE(0x6, &(0x7f0000000ac0), 0x40) 12:34:50 executing program 1: r0 = syz_io_uring_setup(0x15f7, &(0x7f0000000980)={0x0, 0xfac1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000010c0)=r1, 0x1) 12:34:50 executing program 2: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8060}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:34:51 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000ac0), 0x40) 12:34:51 executing program 0: setrlimit(0x0, &(0x7f0000000000)={0x4, 0x1f}) 12:34:51 executing program 1: pkey_mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 12:34:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 12:34:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000000), 0x4) 12:34:51 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x540a, 0x202) 12:34:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000080)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) 12:34:52 executing program 0: r0 = io_uring_setup(0x4391, &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 12:34:52 executing program 1: r0 = socket(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 12:34:52 executing program 3: r0 = io_uring_setup(0x3, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x0, 0x11, r0, 0x0) 12:34:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:34:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x2341, 0x4) 12:34:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=[@rthdr_2292={{0x14}}], 0x14}}], 0x2, 0x0) 12:34:52 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 12:34:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) mknod(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/131) 12:34:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x6, &(0x7f0000000000)="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"}) 12:34:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x4, &(0x7f0000000580)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000000)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:53 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), 0x0) 12:34:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x541d, 0x0) 12:34:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f0000000000)) 12:34:53 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') link(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file1\x00') 12:34:53 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 12:34:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x108140a, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 12:34:53 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! .'], 0x191) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x166) 12:34:54 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000000)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b70, &(0x7f0000000000)) 12:34:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'gretap0\x00', @ifru_mtu}) [ 1207.893179][ T32] audit: type=1800 audit(1609418094.435:155): pid=24564 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15794 res=0 errno=0 12:34:54 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x4, &(0x7f0000000580)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000000)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)={0x81, 0x0, "d0fe77502a044adb6c700280518bfd11cb414915dbf2a082933d7b03e595ee660bf2d2113b65dc3a515da63359178f6a14a4d712a17fd128244ff66a39f8d57ba0023d0344503bd8d69512a3061386212cc1413258d3c86ee7d884676404ed6dc7080a09dc02128ea64965fac0b2a04d838a2af360e7a2791b"}, 0x0) 12:34:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000002c0)={'vlan0\x00'}) 12:34:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b3c, 0x0) 12:34:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f0000000000)="a4") 12:34:55 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 12:34:55 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpriority(0x1, 0x0) 12:34:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) 12:34:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000580)=@framed={{}, [@call]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xda, &(0x7f0000000000)=""/218, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1209.306472][ T32] audit: type=1800 audit(1609418095.854:156): pid=24592 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15729 res=0 errno=0 12:34:55 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000000) 12:34:56 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r0, 0x541e) 12:34:56 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x559280, 0x0) 12:34:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x80108906, 0x0) 12:34:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5422, 0x0) 12:34:56 executing program 1: r0 = socket(0x2, 0x3, 0x6) connect$vsock_stream(r0, 0x0, 0x0) [ 1210.196721][ T32] audit: type=1800 audit(1609418096.744:157): pid=24613 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16321 res=0 errno=0 12:34:57 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:34:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002880)=ANY=[@ANYBLOB="7400000023fb9b"], 0x74}}, 0x0) 12:34:57 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1bda42, 0x0) r1 = memfd_create(&(0x7f0000000180)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xa6<\x13\xfe\x04\x00\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\xb1mJ\x7f\xe4m\xe6T\xe9\x00\x00\x00\x00Y\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&5\xefD\x04\x160\xafy\x02\\\x15F\x0f\f:\xae\xabm\x8f\xaeh\x8c~8\x9f\xc8\xedO\x00\xbf\x1d\xb1\x84', 0x0) ftruncate(r1, 0x40003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x2008000fffffffe) 12:34:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r0, 0x540f, 0x0) 12:34:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f0000000000)="a4") [ 1210.841528][ T32] audit: type=1800 audit(1609418097.394:158): pid=24630 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16055 res=0 errno=0 12:34:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x40045431, 0x0) 12:34:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002880)=ANY=[@ANYBLOB="7400000023fb9b"], 0x74}}, 0x0) 12:34:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r0, 0x540f, 0x0) 12:34:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3, 0x7}]}]}}, &(0x7f00000007c0)=""/135, 0x32, 0x87, 0x1}, 0x20) 12:34:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) 12:34:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r0, 0x540f, 0x0) 12:34:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000580)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xd4, &(0x7f0000000000)=""/212, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:34:58 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1bda42, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 12:34:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002880)=ANY=[@ANYBLOB="7400000023fb9b"], 0x74}}, 0x0) 12:34:58 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2400, 0x0) 12:34:58 executing program 1: r0 = socket(0x2c, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 12:34:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r0, 0x540f, 0x0) 12:34:59 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 12:34:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002880)=ANY=[@ANYBLOB="7400000023fb9b"], 0x74}}, 0x0) 12:34:59 executing program 1: r0 = socket(0x2, 0x3, 0x6) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) 12:34:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'nr0\x00', @ifru_flags}) 12:34:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, "3b37840241111d69ef530685a36f9472877de0"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, "9c603de15de491a768a11ddb0544ae5bc74a79"}) 12:34:59 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:35:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6b, 0x0) 12:35:00 executing program 1: r0 = socket(0x2, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 12:35:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00'}) 12:35:00 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000004240)={@local, @random="155a129d1b1f", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @dev, @link_local, @local}}}}, 0x0) 12:35:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 12:35:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4bfa, 0x0) 12:35:00 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 12:35:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002000010200000000000000000a"], 0x38}}, 0x0) 12:35:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f0000000000)="a4dd32545e") 12:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) 12:35:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) [ 1214.580002][T24709] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 12:35:01 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc01047d0, 0x0) 12:35:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:35:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b4a, &(0x7f0000000000)) 12:35:01 executing program 2: io_uring_setup(0xf1f, &(0x7f0000000000)={0x0, 0x0, 0x2}) 12:35:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private1}}) 12:35:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 12:35:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5413, &(0x7f0000000000)) 12:35:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:35:02 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0x191) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x70, 0x2, 0x1, 0xf1, 0x9a, 0x0, 0x7ff, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @perf_bp={&(0x7f0000000380)}, 0x10800, 0x1, 0x4, 0x4, 0x9d, 0x10000, 0x8c9c}, 0x0, 0x7, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x166) 12:35:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1f, &(0x7f0000000140)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 12:35:02 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000004240)={@local, @random="155a129d1b1f", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @dev={0xac, 0x14, 0x14, 0xf}, @link_local, @local}}}}, 0x0) 12:35:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000000)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 12:35:02 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 12:35:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b4c, 0x0) 12:35:02 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1058, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {0x4}, [@generic="83add74bc77c197b00b86cad606ebc6f48f04e01a2446145b34ddccec4fef20d5baf40beea727b9c47395d9ea6ca996c40a5faf9c728e90927ed050e881c5b6debd8", @generic="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"]}, 0x1058}}, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x70, 0x2, 0x1, 0xf1, 0x9a, 0x0, 0x7ff, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @perf_bp={&(0x7f0000000380)}, 0x10800, 0x1, 0x4, 0x4, 0x9d, 0x0, 0x8c9c}, 0x0, 0x7, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x0) 12:35:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:35:02 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socketpair(0x11, 0x0, 0x1, &(0x7f0000000000)) 12:35:03 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000300)={'veth1\x00', @ifru_mtu}) 12:35:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xda, &(0x7f0000000000)=""/218, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:35:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcb22bac7861d6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', 0x0) 12:35:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) fstatfs(r2, &(0x7f0000000000)=""/62) 12:35:05 executing program 5: socketpair(0x25, 0x0, 0x0, &(0x7f00000000c0)) 12:35:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b45, &(0x7f0000000000)) 12:35:05 executing program 0: r0 = socket(0x2, 0x3, 0x6) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 12:35:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0xc01047d0, &(0x7f0000000000)) 12:35:06 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1058, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {0x4}, [@generic="83add74bc77c197b00b86cad606ebc6f48f04e01a2446145b34ddccec4fef20d5baf40beea727b9c47395d9ea6ca996c40a5faf9c728e90927ed050e881c5b6debd8", @generic="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"]}, 0x1058}}, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x70, 0x2, 0x1, 0xf1, 0x9a, 0x0, 0x7ff, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @perf_bp={&(0x7f0000000380)}, 0x10800, 0x1, 0x4, 0x4, 0x9d, 0x0, 0x8c9c}, 0x0, 0x7, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x0) 12:35:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0xffffff72, 0x200008c0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 12:35:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) 12:35:06 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000980)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000140)="a8b29446251267b04f12bfd6a7e17f63b4f1db2c54dbba78e4200de08565ed488ea0d931b473b4ede2456444e2fe0b368f52c9201614"}) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x14c) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x7) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 12:35:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcb22bac7861d6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', 0x0) 12:35:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:35:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:35:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="a4dd32545e780bf14bdd4cbdedb538f18073b2535a943fa68bec95fe25f9aee4e0804f9d06835b185d4dd30cf27e6517d316e4ad8ecbefe623d09fb7f921da9dbeb029e268304cb330df6f9e741062e11472a9fd62ccc319e0212d8b9a417955d35641c11f2c0c20") 12:35:07 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1058, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {0x4}, [@generic="83add74bc77c197b00b86cad606ebc6f48f04e01a2446145b34ddccec4fef20d5baf40beea727b9c47395d9ea6ca996c40a5faf9c728e90927ed050e881c5b6debd8", @generic="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"]}, 0x1058}}, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x70, 0x2, 0x1, 0xf1, 0x9a, 0x0, 0x7ff, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @perf_bp={&(0x7f0000000380)}, 0x10800, 0x1, 0x4, 0x4, 0x9d, 0x0, 0x8c9c}, 0x0, 0x7, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x0) 12:35:07 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x82, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'io+mem'}, 0xf) 12:35:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcb22bac7861d6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', 0x0) 12:35:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) 12:35:07 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000040102000100000016000000050000003200000008000000000000000c000b003f00000063307f4e270005"], 0x134}}, 0x0) 12:35:08 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x1058, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {0x4}, [@generic="83add74bc77c197b00b86cad606ebc6f48f04e01a2446145b34ddccec4fef20d5baf40beea727b9c47395d9ea6ca996c40a5faf9c728e90927ed050e881c5b6debd8", @generic="46360de081e452684a5c01f809dd80a4c9f36c6abc456229afe63fe831c8ab181b394488c35416a78a23171d7fa301200f46e4ec84046e451f909e43f9aa441977cf19584bb8536a85944c5e17f366c169ac77f20c45975c50412f5b83f7345ebae4b2e36068858682ac40d5c3a34217f7f18c3c34894ddd66e7602a157d379517b2d46ae200e6cff9c0412ebe646d2f5c17349ed6850f4940f246ba46884e955fde31ece4d9cacff8b7ae1961e0b0f2ea30f126551d982109e7d5d74268dca7ff1a1c3603ace39c7c54fa4eb3c82a12dd7828da6e7c65e0843faf1a686fd24342d6bdf39266809e4b0148c0cee5f42f5b383b2493fdfbf9e85dbe58c76622ba095446aba6d6632ef30174659a11950656917015b2204f3e475b4321eafe7e8f3b8a80884fb04cfbbee7484c7394411b6589b9c38a3d71c45f0343c7dcf8b9a37892296238883c42afd06df2df7aafb8b228f5368881f66fcfde8b05eeb35457bdb8c0ffcccececaac8233aa6130a6c902a19f7725fa95ce90322662b71a114c14087739fcbf58f05ca069cd7b18d5ec127f9c3db4d4a7f1eb64add29e223ebd92cd162906a4464754f09251887b0c9ee4fefe26c6566e12356b87ce7eb5cb2b3bbe0da077f5b9079def6736a1c232f8a58b4e2d3b867a95c15a13178823c3755a733c0c7885afc0f39246fc1a1d29a536c2449d950f992c10d7714e5a2d76bcc3345579c20b639bea66ae37c0e3bcfc0235b60604ec5a11053ec8f17f16114e7204f2dfd122683f8d48fd88832fb2cc6b0a4f7e7a5c0cfb3c7dd1bac70fdc7a79042f835cf77d16be59cb6bb1e51fa7a9861a45bda6741430644b3fadc9f6f6efc008761adbea41cbd1d695e36f571e4b29237d442ff77db0eb6b64730c49c202472962cb3ca21ff2a750a505b93b2192f8f4fb3e6a057881fbe36278bf314cbc2cd8e8f5083e2c8638c3c5c505e3a8690ac0236f9d009688834b1548bcd9c68296e15f8f4cddf0bf76414a71c0ccc31dc7fb422ac4d220effd197db4d8584aab7af5312e225673550289d17cf6521f8d8f12129287cff0b3394c8c8568b2898467ae287760de91e4bef1d32f0b1f60edb45baa975a2c6d83bf3ef19f9d8bbb171e6cb9b3e789d665ff8d7cbaa929efc69bdf615b3602ed7e3d6365f85673f5a229fde1e5fbfb58fd843ea09fbb3f37b3b428c28057f065737db192d1d49f28fbef32c11c21d46715a4c9e65142d04d8860d5bb966a19319c0ff3c19461ff92a8cbb1732e902ab665f837dff9b427af4bbc0ab49f3c000123356f2c9ebf5cb3b3bc5b2d847aadb449efedc3dd2878e475b1626069ec770e0a123db1781a5da0612a098df13d67ac19bb2dac46ef86db67220e075a241a6d23e6d9f865830de0cb9400f80282b42ec059cb949589c56aca47b7aa06d51441d803d527f3bbb3e5eda4b918b6d8ce23e0458bd50791079788828e757fe67214fd6c8c6f88fa365a1ffb55d39f5062ca5ceaf6dfb4d2953047664ca7402d7c4b30791716a07d1f846202a857e60bf6f57fc53a7e8322fba9b7e7c693f07e280b306fd399ce1678036c092eeacee4f3dbcc22b472768ed0a15eb2f636ad7633daa6de9648fc639142517a3fa6ddffa9a6799a9876f0462d6b9df74a2cd03a8c663437b3ffefd52fa1b37a3f66ab1c52be5beea02012be66053ace0218d3f88edd18952e9b8dd31e67a47e277d3b542e43dfe0a72021d038a9ca85a74dbce9bb1898841fa0b990b189239084d943fc440d14748bdfb2a1a5a0d9c0903e6207fb362aa4bc4454c7d68197a22fadb244019a7a9bc89a2dd7631defaec728b6b66e56a62c5bd492e1578a2d6ae21dc15cd7328a3eb7fe3054be54221b3d7f97727052c87667aab80c1c40ab3c987aca96a1d14eb94a940cf29dac1374143adeb5fbaa2fcc51bfe736ac801166103ef3ce0f0dca214202a4ed7665b8c7b3c545fa51779b0a13540f014ae7c0ca6caa1d374d98da335b50f2255257de30db9adde0ec28e3dd0090cc633cd0949ad92f28cb938aeb72d753bb2e0ce355db3dc0be9c82c63b0c8172f4b1e762f56d8f1f3aa760a382e27b7fde5d20a7c7793abee75485ca53d2a13b822063e0757cf8d5dde6a02011d0641855e03ffd452d45241643fe674283a02a9e0e54585c34ed15b810bc44251768996cccac4b33f902999a2a520cadb74d40b48b77c548f83bb9651d638811d4d9a1c318bdbfac3b713c42dcc9fa1863371c823d358ae822133f014ca031ab940afd347d77e68862e69e4fded87ad423e13e4fc0d88a50cc8dcb12add9dcefbaa15850eecd34039fdc8f2466e30d795691cbfddb4896610d9b5315a8c5ae6191e9c727a432914e0d72add89a827e12f249fbcd11a9b45a8688c2a6d4d56ced1d5b83b2c80df4b85b2dc9ad50d7c3f9be0ca569333279ec83c60ba4b2784ee8f07ef801c5534514eba33d966d820682182b77e26fa07221062017bd91fbfe65eb499282b08c00d8bfa8c910694cd457c4cf54ee8482f2788494f14169025956e3a3b2e804148f275f4dc00d47eed5da53b2f56d8b3350ca5a773eedc86e32ec55d86f10ed34414aef46f7a22136fb0d3175923175a1e0503115b43886e9dd6ea442e9bd27dd0e4a79617646fd82cbd667d85ec50aff0e89b81099e2517952169dbe0f16b3ddc83818f44381810480084a8e333aa778fb9ee5bd9eecfb986d4b3055c21fbc2f6ab19e8c32c586fa8d24c93ca2d343e5ddcee6873c437a6cd0385c8656ee6abebd296fc06778a27e04383edc42ba5e481f5ac8992098bd5da1e53cc1b093e099ea409f490c06f6291359fb458ef94cac14108195c174e3065c3add691e9d34c67ea3fda1fef8aab9dfdb657b16f6be81209ab1eed094a4f438472f178b82fa67d7ceb544528ec42f3e66d8569864d06609fcb67e87686eeb70b755d391538e32fbca04195e937293c1058e905b8f73cea9be43c523de424147cb714aca737173e70d95552bf837ee2c610fcfe0f812803a43388e1a860242a7e23e01442b715632088c51abc3355d260a64dd739a8d7825c174d15a60e40a1554e2ec524cf76625371021ff7bb5f6b1d1834dd7ff5546188dc4de8e7f65b7a6212ec770204a2a6d40b584d71b1cf441f3199bd616c6f50f89b63ad314517e6ebfd9972d3188934cbe3758be867bcad7f87607bf8cdb76fbf7dbf25fb4cca48ba443c36c332cdefb21822e6e5cf661184e84d8362f47e921042bc048d2cd16a7fd37e82ede04b2397cc87b9c216c67edf754d581bfb473535b95c1e9050613182fe5d0585db7157af5a0f314f5eb756d89e3cdb500f3005301eb1cd7f08e71f8ad4e21130b1c73a669660cd68d2b17990b9bc5384ff563eb6ba1869795fa90441005c1b7e50ca2a79990f99c6174d81cfb95346fcf5ec1218d7fca3f7332674a7be3d3ee60cfcfc315076b747b97e01747ca741dc8eed7b6564dc55a8564936555146c0bfedd649192ef3a248b01308e0dfa8d8c7b1f59b425514e6628946f0bdeb129b189f48f2d277efabb5518d187b84d0dd1d4a98332317cd544ba1fe916084d39277bbb462799840eb7e5ae59c855e1e597b0180aace1a8bf72e8c8c69a75d5dac7a0ee041390c59238ea51d24ee5da79a38d27230d0216e8135a7f0d4c2ab8046861599fb4f3a4a1c8df2f196c137473caa40acb26fc8b6267f8fc47af4af2026beac771a351a3e91482a96e4d5d296418d18c3c0e585737a07a81635fc923264833b7cd32a1b0f4145bc439f61c679d26884b169f5e1818610a4de58f71ce2687fd025a8c25a7de5db207f36dd90c3e63622e788d06db2a49b6bddeab889195e88e3bd5e44cac79bd927391f47424f5641e7f17a7c92109c127cea913cc0f3fb8fed252614077fc129c86ba796fbc24c43f021a50a2f9d95ba05f2e2669a49f59c83bcfbb43537b50fab0d0ba995625387cc2d4d3ec77128d1d9d547bf71c5105e1da864b616580da8edc09bab311abf08d96fd8ecaca99a78969bf91287d07aa2b2173e2445ad46f8f245606c331789044d7549690e604559484babeafd7e0a6f78205eda82af9be5e5a149633232931b2d4e876ce11ebbce298506b844657431c84c6b9d6d3f4580de26f5ab39ea4e5fda70b28c7639afa1a6edc68dcedbffbdd9dc60b3f512c0e4c7fba6e733f84277afd555b77427eceec2400a1bbfa1f4a7fd6d5e1f412b2b875ce57ea464ec9e4ddf2264086d2430eb822b8a2f936dcda71c026b138c2bd6b36ffeaa4a9007e0e17c0f3e0e10ab7704404d0365d43aa85930fc530570d6d55f2807675f0dec26847a0f2250808ae00b58d1526ce06612416e15366c2269c9e8f4e2b627584a9cd253b8fac9cafcca96ffde7e86cddc234e51dc3250dc486eebf5bf078df354fdb54ae53a55e1a9f8f8e783b5f53fc59f44c8bfeed1a9f9de904ee4d109f946e90bf012fe695689ce18624f48a6b0eeaca20b6e7783c6149d60db5e73645fee9e56b3f92c8cfbfe64ed81a2e9913b807063e9c5cfecd692b7a2934daf0dc4fb76405a9c3c297a1b9250a942f056175aa6eeeeca1a7ff605600785a715dca1f12f1d6bce42d392bb32d3ad82d200d6d97fc9baa24c8f17ae79ed3f219d509975c6426875f84c95124c8b91b8f5b73d0877c10714c1987bf6869773871a9429ba60cb30c9ccb0b81572412d02cff0686c651a31c843ed181c6407447828a4bc46b7fa32e891d87cce8c46c3862f872b43da79f789ccf2398c2682f297757a490a10236ff6d661ee61f274dee825a1d7f8f1817236a96f8d96a99405f32d5b57935d6b6215eeb652d2dbb875969442df19a506b454c904c16432bbe90dfa89b16fe78601d44b242d508d33fcd4610b34ca91506df21d622a42e75732f20f2cb8b484cdd9233ece4d1bec0fee4f389c7bdf6aee70b966ced905f17801f2b63298aa75c43d76370b8eb1c3999c8c6f6a422632f759c75bb002e84c00fa932e1bfb25294a4a7d3ec2b8b74020cb05af5c2c9923a02ed939ed6f6607148738a039bf7f7027a66cdc35b068e548d77d92ca462e526e389ee91ddbe3acdf269ba734ed06aa444ca5d0a1114907e632ce97cc0279edc40c9dfc2df45381ec457dd0bf8f0c3546792597dd9da08066dff60d49a4e163411fb2fc4748c3b11a7c4637338e0e7d7b80949739fa7da2027568501dc179d4cb70a87211102ccbc0ab2bbdfc9d7bec08bfaf1e84018bfb228a6794b865e4be39524425276c9c4c82f304626460328fdc35a8480f1c233bdedaf8e74ef248095d7dc804e8c82bbc3ae4bf4931e354eb5b016f22cd58971e63c74a996711454c7132b4f9fd202c22aee80ff0cf58e07ce6f0864457ae77c5dda3e434699c7b8913100a5a05557059e37e7a037457a2d97e3c6af2a40901b6a067779eb794566e6ee1b0ecd24b20606afffd5a44cb753bce2c7b628bd90eb74a5208ac7e0e5cd064e69924e85f8b363717c01f3131c8cc5649f4ea913040ef13a54b350dc806cd4c6b4ace03d4244803fdea9a370415bc941aec73b46ccb04ee1d4c36af9fe328af33c471af465e74f67aae0d1c54796417a40270feefac639f56cab2d94067e5e3928ca15810281eedca0fd1ddc276082e2038a613896f012b6b18a64a5d51b3f212ef17d595b5c731d208444ed24fa37b636c7e67cb93e421c18902285b986bafbfca63e4218b430771c1d44ad6f8db4e558dd9275dad601f83590b3599ea30eae91df87e9a95cf08cfb310ed1e113962365ec8a"]}, 0x1058}}, 0x0) perf_event_open(&(0x7f00000014c0)={0x3, 0x70, 0x2, 0x1, 0xf1, 0x9a, 0x0, 0x7ff, 0x10, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @perf_bp={&(0x7f0000000380)}, 0x10800, 0x1, 0x4, 0x4, 0x9d, 0x0, 0x8c9c}, 0x0, 0x7, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xba}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x0) 12:35:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, 0x0, 0x0) [ 1221.705324][T24841] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 12:35:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcb22bac7861d6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r3, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1221.770508][T24844] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 12:35:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/81) 12:35:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000040)="cd17c2"}) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x18102000, 0x0, 0x0, 0x0, 0x0) 12:35:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 12:35:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x2, &(0x7f0000000300)={'gretap0\x00', @ifru_mtu}) 12:35:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000580)=@framed={{}, [@call]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xda, &(0x7f0000000000)=""/218, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000580)=@framed={{}, [@call]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xda, &(0x7f0000000000)=""/218, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:09 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket(0x0, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000040102000100000016000000050000003200000008000000000000000c000b003f00000063307f4e270005000000000000000022e4c21410100a0b5b7d3c03370f4c5e11e356ea62c4f7b8dcc6d5b80088000580180001000000020007000000000000000900000004000000180001000000000025c3000000f80700400000000800000014000200430000000200000001040000050000001400020007000000000000009f0000000200000014000200ff05000006000000ffffff7f0400000018000100dfb80000020000000600"], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 12:35:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b3a, &(0x7f0000000000)) 12:35:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 1223.697185][ T32] audit: type=1800 audit(1609418110.244:159): pid=24882 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16087 res=0 errno=0 12:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000004c0)={[], [{@uid_eq={'uid'}}]}) 12:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000040)="cd17c2"}) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x18102000, 0x0, 0x0, 0x0, 0x0) 12:35:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x80045440, &(0x7f0000000000)) 12:35:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000580)=@framed={{}, [@call]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000000)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0xffffffffffffffff) 12:35:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f0000000000)) 12:35:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x21b) 12:35:11 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000040102000100000016000000050000003200000008000000000000000c000b003f00000063307f4e270005000000000000000022e4c21410100a0b5b7d3c03370f4c5e11e356ea62c4f7b8dcc6d5b80088000580180001000000020007000000000000000900000004000000180001000000000025c3000000f80700400000000800000014000200430000000200000001040000050000001400020007000000000000009f0000000200000014000200ff05000006000000ffffff7f0400000018000100dfb800000200000006000000054000000004"], 0x134}}, 0x0) 12:35:12 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, 0x0) 12:35:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="6800000010000104000000000000100000000000", @ANYRES32=0x0, @ANYBLOB="0000000800220000400012800c0001006d6163766c616e00300002801c00050004"], 0x68}}, 0x0) 12:35:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f0000000000)) [ 1225.960149][ T32] audit: type=1800 audit(1609418112.504:160): pid=24914 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16380 res=0 errno=0 [ 1226.010115][T24914] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 12:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000040)="cd17c2"}) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x18102000, 0x0, 0x0, 0x0, 0x0) 12:35:12 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000380)) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000024000b0f00000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000040102000100000016000000050000003200000008000000000000000c000b003f00000063307f4e270005000000000000000022e4c21410100a0b5b7d3c03370f4c5e11e356ea62c4f7b8dcc6d5b80088000580180001000000020007000000000000000900000004000000180001000000000025c3000000f80700400000000800000014000200430000000200000001040000050000001400020007000000000000009f0000000200000014000200ff05000006000000ffffff7f0400000018000100dfb80000020000000600000005400000000400002c000c007b"], 0x134}}, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 1226.142317][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1226.152051][T24923] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 12:35:12 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x3665c4, 0x0}}], 0x300, 0x0, 0x0) 12:35:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)="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"}) 12:35:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f0000000000)) 12:35:13 executing program 0: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000040)={'wg0\x00', @ifru_names}) [ 1227.085556][ T32] audit: type=1800 audit(1609418113.634:161): pid=24940 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16327 res=0 errno=0 12:35:13 executing program 1: socket(0xa, 0x5, 0x6) 12:35:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x2, &(0x7f0000000080)=@raw=[@map], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f0000000000)) 12:35:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0x0, 0x0, 0x0, 0x4}, 0x40) 12:35:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x12, 0x0, &(0x7f0000000040)) 12:35:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f0000000040)) 12:35:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000040)="cd17c2"}) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x18102000, 0x0, 0x0, 0x0, 0x0) 12:35:15 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 1229.749348][ T8714] usb 2-1: new full-speed USB device number 2 using dummy_hcd 12:35:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x25}]}}, &(0x7f0000000080)=""/255, 0x2a, 0xff, 0x1}, 0x20) 12:35:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xb, r0, 0x0, 0x0, 0x0) 12:35:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xe, r0, 0x0, 0x0, 0x0) 12:35:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2}]}}, &(0x7f0000000080)=""/255, 0x32, 0xff, 0x1}, 0x20) [ 1230.110361][ T8714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1230.121714][ T8714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.133250][ T8714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1230.143584][ T8714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:35:17 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) 12:35:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) [ 1230.533218][ T8714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1230.544082][ T8714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.552687][ T8714] usb 2-1: Product: syz [ 1230.556988][ T8714] usb 2-1: Manufacturer: syz [ 1230.561778][ T8714] usb 2-1: SerialNumber: syz 12:35:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 12:35:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000100)) [ 1231.049645][ T8714] cdc_ncm 2-1:1.0: bind() failure [ 1231.063992][ T8714] cdc_ncm 2-1:1.1: bind() failure [ 1231.221962][ T8714] usb 2-1: USB disconnect, device number 2 [ 1231.263153][T23775] usb 3-1: new high-speed USB device number 9 using dummy_hcd 12:35:18 executing program 4: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 12:35:18 executing program 3: bpf$BPF_BTF_LOAD(0x8, 0x0, 0x3) 12:35:18 executing program 0: keyctl$search(0xc, 0x0, 0x0, 0x0, 0x0) [ 1231.751917][T23775] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1231.878881][ T8714] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1231.929671][T23775] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.939015][T23775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.947110][T23775] usb 3-1: Product: syz [ 1231.951559][T23775] usb 3-1: Manufacturer: syz [ 1231.956260][T23775] usb 3-1: SerialNumber: syz [ 1232.101838][T23775] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1232.239032][ T8714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.250519][ T8714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.260599][ T8714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1232.270640][ T8714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1232.315268][ T8465] usb 3-1: USB disconnect, device number 9 [ 1232.504692][ T8714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.514222][ T8714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.522620][ T8714] usb 2-1: Product: syz [ 1232.526892][ T8714] usb 2-1: Manufacturer: syz [ 1232.531729][ T8714] usb 2-1: SerialNumber: syz 12:35:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)=""/162, 0x1a, 0xa2, 0x1}, 0x20) 12:35:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x11, 0x4, &(0x7f0000002100)=@framed={{}, [@func]}, &(0x7f00000021c0)='GPL\x00', 0x3, 0xc2, &(0x7f0000002200)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8992, &(0x7f00000000c0)={'bond_slave_0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 12:35:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) 12:35:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 1232.624981][ T8714] usb 2-1: can't set config #1, error -71 [ 1232.679751][ T8714] usb 2-1: USB disconnect, device number 3 [ 1232.782757][T25036] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 1232.837168][T25038] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 1233.109765][ T8713] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1233.559015][ T8713] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1233.749497][ T8713] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.758904][ T8713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.767007][ T8713] usb 3-1: Product: syz [ 1233.771493][ T8713] usb 3-1: Manufacturer: syz [ 1233.776189][ T8713] usb 3-1: SerialNumber: syz 12:35:20 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x15, r0, 0x0, 0x0, 0x0) 12:35:20 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000500)={0x0, "48c26495f75d8ab79244944c17bf627f07632a6f2a742d471496cdd5b1d71efc41ed466908db61c7bf7dd788c1ee14488962649b9bb06e147a51376027c47bba"}, 0x48, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, r0) 12:35:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 12:35:20 executing program 5: r0 = socket(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) 12:35:20 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffe) 12:35:20 executing program 1: mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',defcontext=user_u,rootcontext=']) [ 1233.968753][ T8713] usb 3-1: can't set config #1, error -71 [ 1233.996240][ T8713] usb 3-1: USB disconnect, device number 10 [ 1234.123799][T25061] fuse: Unknown parameter 'defcontext' [ 1234.158740][T25061] fuse: Unknown parameter 'defcontext' 12:35:21 executing program 5: mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',group_id=', @ANYBLOB, @ANYBLOB=',defcontext=user_u,rootcontext=sysadm_u,', @ANYRESDEC]) 12:35:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x6, 0xab, &(0x7f0000000140)=""/171, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:21 executing program 0: syz_usb_connect(0x0, 0xb0, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x59, 0x80, 0x8a, 0x40, 0x4f2, 0xaff9, 0x8df3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0xb9, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x3, 0x1f, 0xf3}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0x3f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x20}, @generic={0x48, 0x3, "b4a31b1777747f49af15fb253b65a13fd257d229ba50c680db3c345d29f84caaa495c2ed3707145de942056f3fd36657f5704af7df9de7d4f3079800fdf6b1ce84d3e8aedbb4"}]}}, {{0x9, 0x5, 0xf}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x52, 0x16, 0x5b, 0x0, [@uac_control]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x7f, 0xfa, 0x7, 0x0, 0xd7}, 0xe9, &(0x7f00000003c0)={0x5, 0xf, 0xe9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "b78ff1fc5f4450b65b88d5ce6dddc14f"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a42d7a25d04900e888ddf936dfbdcba9"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x4}, @generic={0xae, 0x10, 0xb, "a6496865ff25c4ffce5683b3615ca8bd53395b72536f94d7d24849032077d94ac04fa5c25466c47edaefacc305f12b326b5ee613143b462dd16abadb33297a48d1688bde3a9175bdd285512ca9aacd7b0371327fecdff0b8a45b7896cdae83adadb458cd647af564f6216c6ec2eb9305c0a95b8f0d2fbaaf978c33b8c9acb60820ff4f0b5adf2c33c02f3779c2f6ded9f95b71250f42c0c2cd10d756d7f1d65a08823c31d09e8513801333"}]}, 0x1, [{0x2, &(0x7f0000000500)=@string={0x2}}]}) 12:35:21 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x3e, &(0x7f0000000140)={0x5, 0xf, 0x3e, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9060dcc8f667396396a04070bd5e43b9"}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x407}}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 12:35:21 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0xb, &(0x7f00000000c0)={0x5, 0xf, 0xb, 0x2, [@generic={0x3}, @ptm_cap={0x3}]}}) 12:35:21 executing program 2: bpf$BPF_BTF_LOAD(0x8, 0x0, 0x300) [ 1234.751363][T25071] fuse: Bad value for 'fd' [ 1234.759138][T25071] fuse: Bad value for 'fd' 12:35:21 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 12:35:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xb, r0, &(0x7f0000001140)='asymmetric\x00', &(0x7f0000001180)={'syz', 0x0}, 0x0) [ 1235.109164][T23775] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1235.148934][ T8714] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1235.151074][ T8465] usb 2-1: new high-speed USB device number 4 using dummy_hcd 12:35:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x5, r0, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) [ 1235.420021][ T8465] usb 2-1: Using ep0 maxpacket: 16 [ 1235.569086][T23775] usb 1-1: config 0 has an invalid interface number: 219 but max is 1 [ 1235.577533][T23775] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1235.589141][T23775] usb 1-1: config 0 has no interface number 1 [ 1235.595376][T23775] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1235.599441][ T8714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 12:35:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, &(0x7f0000000080)=""/255, 0x3e, 0xff, 0x1}, 0x20) [ 1235.606190][T23775] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1235.615928][ T8714] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1235.635925][ T8714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1235.645813][ T8714] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1235.680173][ T8465] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 12:35:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}]}]}}, &(0x7f0000000300)=""/168, 0x3e, 0xa8, 0x1}, 0x20) 12:35:22 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) [ 1235.878954][ T8465] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1235.888254][ T8465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.896649][ T8465] usb 2-1: Product: syz [ 1235.901143][ T8465] usb 2-1: Manufacturer: syz [ 1235.905835][ T8465] usb 2-1: SerialNumber: syz [ 1235.966793][T23775] usb 1-1: language id specifier not provided by device, defaulting to English 12:35:22 executing program 5: r0 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 1236.120283][T23775] usb 1-1: New USB device found, idVendor=04f2, idProduct=aff9, bcdDevice=8d.f3 [ 1236.129864][T23775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.137975][T23775] usb 1-1: Product: syz [ 1236.142445][T23775] usb 1-1: Manufacturer: syz [ 1236.147134][T23775] usb 1-1: SerialNumber: syz [ 1236.229791][ T8714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.239160][ T8714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.246072][T23775] usb 1-1: config 0 descriptor?? [ 1236.247273][ T8714] usb 4-1: Product: syz [ 1236.256676][ T8714] usb 4-1: SerialNumber: syz [ 1236.261564][ T8465] usb 2-1: USB disconnect, device number 4 12:35:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) [ 1236.472671][T25079] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1236.506933][ T8465] usb 1-1: USB disconnect, device number 2 [ 1236.751471][ T8714] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1236.955994][ T8464] usb 4-1: USB disconnect, device number 10 [ 1237.062133][ T8714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1237.308974][ T8714] usb 2-1: Using ep0 maxpacket: 16 [ 1237.314422][T23458] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1237.510178][ T8714] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1237.681725][ T8714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1237.691441][ T8714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.700278][ T8714] usb 2-1: Product: syz [ 1237.704553][ T8714] usb 2-1: Manufacturer: syz [ 1237.710733][ T8714] usb 2-1: SerialNumber: syz [ 1237.758661][ T8465] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1237.791205][T23458] usb 1-1: config 0 has an invalid interface number: 219 but max is 1 [ 1237.799761][T23458] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1237.811683][T23458] usb 1-1: config 0 has no interface number 1 [ 1237.817956][T23458] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1237.830304][T23458] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1237.848700][ T8714] usb 2-1: can't set config #1, error -71 [ 1237.872667][ T8714] usb 2-1: USB disconnect, device number 5 12:35:24 executing program 0: keyctl$search(0xb, 0x0, 0x0, 0x0, 0x0) [ 1237.959095][T23458] usb 1-1: string descriptor 0 read error: -71 [ 1237.965721][T23458] usb 1-1: New USB device found, idVendor=04f2, idProduct=aff9, bcdDevice=8d.f3 [ 1237.975045][T23458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.042688][T23458] usb 1-1: config 0 descriptor?? [ 1238.066508][T23458] usb 1-1: can't set config #0, error -71 [ 1238.075041][T23458] usb 1-1: USB disconnect, device number 3 [ 1238.249786][ T8465] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.259954][ T8465] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1238.270058][ T8465] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1238.279953][ T8465] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 12:35:24 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001200)='/dev/null\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 12:35:24 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}}}}]}}, 0x0) 12:35:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/168, 0x37, 0xa8, 0x1}, 0x20) 12:35:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)='keyring\x00') 12:35:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000000580)=""/243, 0x32, 0xf3, 0x1}, 0x20) 12:35:24 executing program 0: io_setup(0x0, &(0x7f0000000100)) [ 1238.409564][ T8465] usb 4-1: string descriptor 0 read error: -71 [ 1238.416103][ T8465] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.426498][ T8465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.589022][ T8465] usb 4-1: can't set config #1, error -71 [ 1238.622224][ T8465] usb 4-1: USB disconnect, device number 11 12:35:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) [ 1238.779766][T23458] usb 3-1: new full-speed USB device number 11 using dummy_hcd 12:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)) 12:35:25 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0) 12:35:25 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) 12:35:25 executing program 3: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')', 0x1, 0xfffffffffffffffd) [ 1239.141184][T23458] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1239.152641][T23458] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1239.163589][T23458] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1239.521702][T23458] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.531239][T23458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.539528][T23458] usb 3-1: Product: syz [ 1239.543786][T23458] usb 3-1: Manufacturer: syz [ 1239.550612][T23458] usb 3-1: SerialNumber: syz 12:35:26 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0xffffffffffffffff) 12:35:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000380)=""/255, 0x26, 0xff, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) [ 1239.748787][ T8464] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1239.968653][T23458] cdc_ncm 3-1:1.0: bind() failure [ 1239.984399][T23458] cdc_ncm 3-1:1.1: bind() failure [ 1240.054868][T23458] usb 3-1: USB disconnect, device number 11 [ 1240.147239][ T8464] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1240.320062][ T8464] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1240.329473][ T8464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.337667][ T8464] usb 5-1: Product: syz [ 1240.342474][ T8464] usb 5-1: Manufacturer: syz [ 1240.347194][ T8464] usb 5-1: SerialNumber: syz [ 1240.392714][T25179] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1240.461566][ T8464] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1240.684172][ T8714] usb 5-1: USB disconnect, device number 4 [ 1240.749138][ T8465] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1241.159663][ T8465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1241.171025][ T8465] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1241.181138][ T8465] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1241.480469][ T8464] usb 5-1: new high-speed USB device number 5 using dummy_hcd 12:35:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000000400)=""/162, 0x26, 0xa2, 0x1}, 0x20) 12:35:28 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) 12:35:28 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 12:35:28 executing program 5: keyctl$search(0x10, 0x0, 0x0, 0x0, 0x0) 12:35:28 executing program 0: r0 = add_key(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="83", 0x1, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) [ 1241.759047][ T8465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1241.768362][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.842640][ T8464] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1241.959018][ T8465] usb 3-1: can't set config #1, error -71 [ 1242.036242][ T8465] usb 3-1: USB disconnect, device number 12 [ 1242.061112][ T8464] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1242.070677][ T8464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.079000][ T8464] usb 5-1: Product: syz [ 1242.083265][ T8464] usb 5-1: Manufacturer: syz [ 1242.087961][ T8464] usb 5-1: SerialNumber: syz [ 1242.181859][ T8461] usb 4-1: new high-speed USB device number 12 using dummy_hcd 12:35:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001200)='/dev/null\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:35:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3}]}) [ 1242.438570][ T8461] usb 4-1: Using ep0 maxpacket: 16 12:35:29 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_names}) 12:35:29 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000400)=""/162, 0x32, 0xa2, 0x1}, 0x20) 12:35:29 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) [ 1242.528784][ T8464] usb 5-1: can't set config #1, error -71 [ 1242.551730][ T8464] usb 5-1: USB disconnect, device number 5 [ 1242.558740][ T8461] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1242.859748][ T8461] usb 4-1: string descriptor 0 read error: -22 [ 1242.866240][ T8461] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1242.875582][ T8461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:35:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x11, r0, 0x0, 0x0, 0x0) 12:35:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000400)=""/162, 0x32, 0xa2, 0x1}, 0x20) 12:35:29 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "9060dcc8f667396396a04070bd5e43b9"}]}}) 12:35:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6c}]}}, &(0x7f0000000080)=""/255, 0x2a, 0xff, 0x1}, 0x20) [ 1243.244860][ T8461] usb 4-1: USB disconnect, device number 12 [ 1243.284727][T23775] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1243.710212][T23775] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1243.888802][T23775] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 1243.898674][T23775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.906776][T23775] usb 3-1: Product: syz [ 1243.911200][T23775] usb 3-1: Manufacturer: syz [ 1243.915882][T23775] usb 3-1: SerialNumber: syz [ 1243.999026][ T8461] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1244.078637][ T8465] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1244.226315][T23775] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1244.269595][T23775] usb 3-1: USB disconnect, device number 13 [ 1244.348417][ T8465] usb 4-1: Using ep0 maxpacket: 16 [ 1244.460561][ T8461] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1244.483817][ T8465] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.690406][ T8461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1244.699978][ T8461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.708236][ T8461] usb 1-1: Product: syz [ 1244.712590][ T8461] usb 1-1: Manufacturer: syz [ 1244.717301][ T8461] usb 1-1: SerialNumber: syz [ 1244.779976][ T8465] usb 4-1: string descriptor 0 read error: -22 [ 1244.786674][ T8465] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1244.796050][ T8465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.958737][T23458] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1244.996039][ T8461] cdc_ether: probe of 1-1:1.0 failed with error -22 12:35:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x70, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASTER={0x4}]}, 0x70}}, 0x0) 12:35:31 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000180)) 12:35:31 executing program 5: add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x2, 0x0) 12:35:31 executing program 4: pipe2(&(0x7f0000000880), 0x0) pipe2(&(0x7f0000000880), 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7f}, 0x0, 0x0) [ 1245.171194][ T8465] usb 4-1: can't set config #1, error -71 [ 1245.293714][ T8461] usb 1-1: USB disconnect, device number 4 [ 1245.303219][ T8465] usb 4-1: USB disconnect, device number 13 [ 1245.378999][T23458] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1245.619311][T23458] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 1245.628718][T23458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.636811][T23458] usb 3-1: Product: syz [ 1245.641291][T23458] usb 3-1: Manufacturer: syz [ 1245.646020][T23458] usb 3-1: SerialNumber: syz 12:35:32 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x2, 0x0, 0x0, [{}]}]}}, &(0x7f0000000400)=""/162, 0x32, 0xa2, 0x1}, 0x20) 12:35:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a35}, 0xc) 12:35:32 executing program 4: socket(0x10, 0x2, 0xe) 12:35:32 executing program 2: socket$netlink(0x10, 0x3, 0x12) 12:35:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}]}}, &(0x7f0000000300)=""/168, 0x2e, 0xa8, 0x1}, 0x20) [ 1246.040868][T23458] usb 3-1: can't set config #1, error -71 [ 1246.049033][ T8464] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1246.066696][T23458] usb 3-1: USB disconnect, device number 14 [ 1246.488789][ T8464] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 12:35:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000080)=""/255, 0x29, 0xff, 0x1}, 0x20) 12:35:33 executing program 2: keyctl$search(0x14, 0x0, &(0x7f0000001140)='asymmetric\x00', &(0x7f0000001180)={'syz', 0x0}, 0x0) 12:35:33 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 12:35:33 executing program 4: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 12:35:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 12:35:33 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0, 0xb1dbec5505d674b0, 0xffffffffffffffff, 0x10000000) [ 1246.958266][ T8464] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.967461][ T8464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.975804][ T8464] usb 1-1: Product: syz [ 1246.980295][ T8464] usb 1-1: Manufacturer: syz [ 1247.079198][ T8464] usb 1-1: can't set config #1, error -71 [ 1247.103196][ T8464] usb 1-1: USB disconnect, device number 5 12:35:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000400)=""/162, 0x32, 0xa2, 0x1}, 0x20) 12:35:34 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xf}]}]}}, &(0x7f0000000080)=""/255, 0x2e, 0xff, 0x1}, 0x20) 12:35:34 executing program 2: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r3) 12:35:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8}, @val={0xc}}}}, 0x28}}, 0x0) 12:35:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000100)='q', 0x1, r1) 12:35:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) 12:35:34 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)="dadcb5465efdefe6926abebaa499d81d3e5e97d5a578ccd783bde4c87b4bbdd6e12dff1fd89fe9d873ab18c0427334629eea0bee98dd248a8c184eaec10571e57674e3e5b980b3295f0dcf3f1158eb4eee9ff6eadaa2df9f4d0e7bdf16220274677a555b53d2176dc3239b6251050cf0ca5e0f2370", 0x75}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1247.963377][T25346] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 12:35:34 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'tunl0\x00', @ifru_names}) [ 1248.056217][T25349] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 12:35:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @empty}, &(0x7f0000000140)=0xffffffffffffff81) 12:35:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 12:35:34 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0xa0a522c408cdbf0a, 0x0) 12:35:34 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x412) 12:35:35 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x49, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x57, 0x0, 0x0, 0x1}, 0x11, &(0x7f0000000080)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000480)=@string={0x2}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44a}}, {0x2, &(0x7f0000000580)=@string={0x2}}]}) 12:35:35 executing program 5: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)) 12:35:35 executing program 2: io_setup(0x78b, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 12:35:35 executing program 3: bpf$MAP_CREATE(0x15, &(0x7f0000000000), 0x40) 12:35:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x15}, 0x40) 12:35:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x0, 0x0, [{}]}]}}, &(0x7f0000000400)=""/162, 0x32, 0xa2, 0x1}, 0x20) 12:35:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000900)={0x18}, 0x40) [ 1249.458029][ T8714] usb 2-1: new high-speed USB device number 6 using dummy_hcd 12:35:36 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 12:35:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r1, 0x0) 12:35:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000400)=""/162, 0x1000000, 0xa2, 0x1}, 0x20) [ 1249.718121][ T8714] usb 2-1: Using ep0 maxpacket: 16 12:35:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000001140)='asymmetric\x00', &(0x7f0000001180)={'syz', 0x0}, 0x0) 12:35:36 executing program 5: io_setup(0x10000, &(0x7f0000000080)) [ 1249.839319][ T8714] usb 2-1: config 1 interface 0 altsetting 73 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1249.852660][ T8714] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1250.098768][ T8465] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1250.569234][ T8465] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1250.712889][ T8714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1250.722264][ T8714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.764203][ T8465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1250.773551][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.780587][T25368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1250.781985][ T8465] usb 3-1: Product: syz [ 1250.792697][ T8465] usb 3-1: Manufacturer: syz [ 1250.797237][T25368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1250.797387][ T8465] usb 3-1: SerialNumber: syz [ 1250.956466][ T8465] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1251.096068][ T8714] usb 2-1: USB disconnect, device number 6 [ 1251.151098][ T8464] usb 3-1: USB disconnect, device number 15 [ 1251.827963][ T8464] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1251.968036][ T8465] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1252.068047][ T8464] usb 2-1: Using ep0 maxpacket: 16 [ 1252.188718][ T8464] usb 2-1: config 1 interface 0 altsetting 73 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1252.202173][ T8464] usb 2-1: config 1 interface 0 has no altsetting 0 12:35:39 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_names}) 12:35:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x7a}]}}, &(0x7f0000000400)=""/162, 0x26, 0xa2, 0x1}, 0x20) 12:35:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 12:35:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40000001) 12:35:39 executing program 4: add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:'}, &(0x7f00000000c0)={0x0, "fb6e347fc7c62d29360cb72e33d158a12be646f3abe8f9f8480216f3483910dc7a56f22c923ae53751e1808fe18e093c2f58418c241590d7cc2ce9ceddb7fe13"}, 0x48, 0xfffffffffffffffc) [ 1252.458612][ T8465] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1252.548480][ T8464] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1252.559395][ T8464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.670314][ T8465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1252.679636][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.681982][ T8464] usb 2-1: can't set config #1, error -71 [ 1252.687860][ T8465] usb 3-1: Product: syz [ 1252.687915][ T8465] usb 3-1: Manufacturer: syz [ 1252.688022][ T8465] usb 3-1: SerialNumber: syz [ 1252.734226][ T8464] usb 2-1: USB disconnect, device number 7 12:35:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 12:35:39 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x25000000}]}}, &(0x7f0000000080)=""/255, 0x2a, 0xff, 0x1}, 0x20) 12:35:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x1}, {}]}]}}, &(0x7f0000000300)=""/168, 0x36, 0xa8, 0x1}, 0x20) 12:35:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x0, 0x0, 0x7}, 0x40) 12:35:39 executing program 3: r0 = socket(0x10, 0x2, 0x6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001140)={0x14}, 0x14}}, 0x0) [ 1253.108420][ T8465] usb 3-1: can't set config #1, error -71 [ 1253.162295][ T8465] usb 3-1: USB disconnect, device number 16 12:35:40 executing program 5: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='B', 0x1) socketpair(0x1f, 0x0, 0x0, &(0x7f0000000040)) 12:35:40 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, 0x0) [ 1254.133281][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state 12:35:40 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0xfffffffffffffe12) 12:35:40 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x873243, 0x0) 12:35:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f0000000040)) 12:35:40 executing program 5: mount$fuse(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',blksize=0x0']) 12:35:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000400)=""/162, 0x5f5e0ff, 0xa2}, 0x20) [ 1254.229030][ T9591] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1254.423199][T25465] fuse: blksize only supported for fuseblk [ 1254.471818][T25465] fuse: blksize only supported for fuseblk 12:35:41 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x80000) [ 1254.630555][ T9591] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1254.640439][ T9591] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1254.650502][ T9591] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 12:35:41 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 12:35:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 12:35:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x5421, 0x0) 12:35:41 executing program 4: pipe2(0x0, 0x8000) [ 1255.029208][ T9591] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1255.038878][ T9591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.047016][ T9591] usb 1-1: Product: syz [ 1255.051450][ T9591] usb 1-1: Manufacturer: syz [ 1255.056135][ T9591] usb 1-1: SerialNumber: syz 12:35:41 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x5}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7f]}, 0x8}) [ 1255.442744][ T9591] usb 1-1: USB disconnect, device number 6 [ 1256.208308][ T8461] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1256.598988][ T8461] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1256.609062][ T8461] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1256.619044][ T8461] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1256.819139][ T8461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1256.828436][ T8461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.836532][ T8461] usb 1-1: Product: syz [ 1256.841020][ T8461] usb 1-1: Manufacturer: syz [ 1256.845713][ T8461] usb 1-1: SerialNumber: syz [ 1257.037201][ C0] raw-gadget gadget: ignoring, device is not running [ 1257.083935][ T8461] usb 1-1: can't set config #1, error -32 [ 1257.126530][ T8461] usb 1-1: USB disconnect, device number 7 12:35:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}}) 12:35:43 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "17"}}, 0x119) 12:35:43 executing program 5: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') 12:35:43 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) 12:35:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e800000000080104000000000000000007000009540004"], 0xe8}}, 0x0) 12:35:43 executing program 4: r0 = epoll_create1(0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) [ 1257.574318][ T8461] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 1257.680996][ T8461] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 12:35:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40486}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:44 executing program 1: perf_event_open$cgroup(&(0x7f0000001c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 12:35:44 executing program 4: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:35:44 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 12:35:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc7539(lrw-camellia-asm,sha256-avx2))\x00'}, 0x58) 12:35:45 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) 12:35:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 12:35:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) 12:35:45 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 12:35:45 executing program 3: io_uring_setup(0x2866, &(0x7f0000000200)) 12:35:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000015c0)='TIPC\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 12:35:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x8000000803, 0x0) write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 12:35:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x3, @vbi}}) 12:35:46 executing program 1: bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) 12:35:46 executing program 5: syz_open_dev$mouse(&(0x7f0000001880)='/dev/input/mouse#\x00', 0x0, 0x20000) 12:35:46 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 12:35:46 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xf0ff7f00000000}}, 0x0) 12:35:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:46 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x300}, 0x0) 12:35:46 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x100000}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7f]}, 0x8}) 12:35:47 executing program 5: timer_create(0x0, &(0x7f0000000680)={0x0, 0x0, 0x4, @thr={&(0x7f0000000540), 0x0}}, 0x0) 12:35:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)={0x24, 0x11, 0x0, 0x801, 0x0, 0x0, {}, [@typed={0xc, 0x4d, 0x0, 0x0, @u64=0x8000}, @nested={0x4, 0x65}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:35:47 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 12:35:47 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) 12:35:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:47 executing program 4: socket(0xa, 0x3, 0x4) 12:35:47 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 12:35:48 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$getflags(r0, 0x0) 12:35:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:48 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000100)='S', 0x1, 0x4000000, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 12:35:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 12:35:48 executing program 3: timer_create(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 12:35:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 12:35:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x40) 12:35:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:35:49 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x7}}, 0x0) 12:35:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000340)=0xc) 12:35:49 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 12:35:49 executing program 0: syz_open_dev$usbfs(&(0x7f00000015c0)='/dev/bus/usb/00#/00#\x00', 0x1000000, 0x0) 12:35:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:49 executing program 1: waitid(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) 12:35:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x40049409, 0x0) 12:35:49 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) 12:35:49 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socketpair(0x23, 0x0, 0x0, &(0x7f0000000240)) 12:35:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000001600)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xea3, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="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"]}]}, 0xec4}}, 0x0) 12:35:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:50 executing program 3: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) perf_event_open$cgroup(&(0x7f0000001c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:35:50 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xc000}}, 0x0) 12:35:50 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x5}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 12:35:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x5421, &(0x7f0000000040)) 12:35:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) 12:35:51 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x60000, 0x0) 12:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={0x0}}, 0x0) 12:35:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) 12:35:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x8000000803, 0x0) write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 12:35:51 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r0}}, 0x48) 12:35:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, 0xffffffffffffffff) 12:35:51 executing program 1: syz_open_dev$vim2m(&(0x7f00000018c0)='/dev/video#\x00', 0x0, 0x2) 12:35:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={0x0}}, 0x0) 12:35:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001600)={0xec4, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xea1, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="01298c6a723e2dbcab9c8a3433995073d282cf2a41b7f3b02517d714f425ee66f3fc18dacf808dca254393d7f4cf7d95fc900e6aff6eef1b8573a5cba374120c86e33b75046dd9684f72cf40d55ca19f348cbe6ffa6681fbb5cabcc8f5995a4c68fbe3984f5988c38ee12214b3037db2991158a98578c846718efa5cf5f058800d9d422e4b132c24b00f9e152d0fc0584cfce4388746125b42f09a168c3fbcaf036540673c4ec811f657f584a735c78a701efa6ee134c6fbd5a8bbd80702fafea3140774a7dcab9cdba502ad445b8f49d35ec6590c5e38a1f243b0a9379c447d06d2428f6771f26d823d14b5fecae5cbd5f453abab0a8bb6518e8d1d0fb3de5b5f6d58b1edcdbc74c050bbfe27b659f2cd7a277c6e8773e73d52918c344a64f3e3cb75b2b1c528225ccf6bd7aded9958f07a2fab32f28a0ccee3a7b213e5c818ecf0c1bcb59909990787d5c5ca5978b7f73585ebd5761f31a83f11b438c92fd79cdd9f3182ea995d52a4541e11e718649e1155b8c313e3334215c4e385b175f8e3e49b81e1d571de42ce4457947dc597e1af15a64f48957b5ebc314b6f18b9ccb2dfa202528403904890513ca6458bb164a068faff3c91ed1161dce96abe55ee60ca833a63e69517a4745164450390b7ffd0c498f1a337615d66779c08b5525554262f7100de099b6d3ce7fdb1bc179b06044fad93c45c28cdaf57dd8861264e81360d317becff42d20af29d5cc9d9b59513e0d0cefbeab1073298706ca16de175cba47d46ebc213bb002751b6b7ec89aa02414a407d97e002f5c26699369a27a37e21f0c46e26081f85498baf120cf18f0246e9db4d4d8425b4a9d9e96e9379e0849ff8290233cbcd3273454e883d015a6b07e0e8759abe7429b84843ff4e0b61b7eb243850dd0977d6ecb8b303477289f24e9bf0d0f1f752e89ae8cca68a4b7b1d241a1329b1e5ee2dfd07a711b7ee59704f9c68d480b95b055947d60091f4ac4738b753870020cf337590ece871ee00b87409b22b2d07a59fd046559e849d5442fe10ac1ec7e871fb7ba5acc80e9e51385eb7b7123a4b8c0752743c6e6b1a01476b8bfc5bd65380c333ff1250ec976d7ca5ee6541e8d4eb8ee2f9a056c77cca9c8787ac7a98c65709dfddccfceb413f3c25b1db7e8db4576caa5eeefa34f35ced92a9bb32eb1a1d16aac0317f016f1bf629cdfb4f257897ada2583f8e6e6c5fe8b333b698c10dd4e1b2d08f436161f408000e809cea701e5ebfa78fb37c21cdd01db9a61198f78ee0016535dd573f8690631d17c35cacec1e88009e7b1b33624aae0334f96af97e27ad6441445d81800109f991335a592400e235d0d6e953cbf9a1d1870231d25daf246a2eee64300502fffbcb37bb42359417fb4162e154d39b3956de240a70d6e9f665c41a35654d6ae84d58429a26a5a347ebbd6695c07ef43bb13cbba383dcdd44f8b9c71fd0bb69416bc88e48e7b45cac9ebd673f4c62f0b608d5fb588d493cf328fd300ec64c8f35792be4dbf52ccea6e8921e513f676fad2690e41afaf03e695b1a05953bf8ab9a256d175bb8c975f4332257ce83a52828a4bafa92f882894bff221843037f40b8822fa149c8406d511f72fd24d62d998546f942b0a67145af755e7c3c27230f1a5e373ef19aec50469a9bd004fabda880278c3ecb7c3236aa3812aa6dab35a8338a51817e8fad280097d3d5be3e0520fa32fcc4fe278c974531be0ed843bfd3da8a4721c1a6fc15f867697dfac5e7f126384ca9403218224ccafe89d56a4621362927d01b5c5970d1c20b4e66b1837185fb7709278854a2aaeefc7454ef31cd91a385bc74ff8936241af94bbbcc17f32195f2c8ae181b2aed99862e563f04d6fa68330202fe2c1a8248c681ce63084a9fe297f3cd4df1a87352b0a1bda378c6266439ca30a60143b3a6c98620978264379781436adb7bfc7406840eee3bff4a178ee5a2cf7d866483eb56ea940ea007c765fcc768a0d2204a1d1b5e3f6312534b60c586f707121ca39e7093709814b6b8d69022580fb19710771a9d3f20f1e7757c77b1b66329d48ee9c68016cc94e9dcea22128f537160f890da3436b347062f7acfe7351c854c3fd5e43a2fa613dd8c809bdf194f86fd7b2d44c1bc80564b0e3efba8562d50a022eb451abc37b4f5256b2391ca9a8307d4130669d0e6b38c6b172fd1634c8836d87bc5e6c720e8d29e18a6b78ed1aeada153095e7bc1ce17efecccad0ae4ac32262efb678329db3e2dd98d3e73d8e7227f4663fce71bcdf098f824311973f0389330b845613b97b378631fdd4e0c84453c6d6de956db00c3cfff25ca2b1f38289b326ec45a502bb553ec893e2f19b9798c801c64b0e19dd581f349d8bd946e7808dd3c6d9da6d3bf79db45df80e8467c78bea306ce6844afdb26eeecdb2184a5cb33cee820e5491a8c2f7709a938ed74d3b1010a84960c4c6c0c8b6bdbd0c0c3806b8eff0a644ccc4d29bc808da76235c19e52206253b52e3bc3bf8d7a06a0cc9816fe49bc7a29d7739a7cc7258863fbd93595b3c6f2e0e78076eda12178c2849fa8e8c4a8d507adbe68db2ef8f0e4ce67968a9e2986f3c25ce63a675d8ae7a6140bd0032363b2f4503b950ce02206f9fc25b7d0d1ca4a126854a9a89acc48b9e58b95c9ad6a8d53ec0f024cba6d159a2790a50d3492082857fd1f93dcd743a86035b829b56ecf2259c2c7d3e2464a25c12160c5045f27251e87ef8c3c5b333cc25202eac7b92b3db719e71725ae3ce1cbb87ef910166dfa24b2a67586822bfa224145c39d50cd7b465c6a59c7571ef8ac5041bd23203061a972d24687309d7160299b9619249ed4b268d4f40badf00ae19cc9cd631db7982d12b0b487a0c305d33131c2b976096e05cce6189c2c9eb143b2b43d6aad619f53ea4c322a4e5cf2e59fb6ac805adbbdd1a2897df493d8bb1579dc1f77efdc36288e4f114a7e3c23a34bd1b9443d648043f8c653b7e38762d459cc8d847aaec0324ce4ec3931c329e44240740885c0707e8be573431ed31dcdecf565b061f7f86a1be0659843a4ee16ed776d2e1d65a740feb4ad658a84e4fc699334ea8385be0e2570d2b88e787154bd88e4eedf9e54ffabc56364247eb283264ee90695aac335db4b008a16e7d01283fedf35a7cae55d438ff4820ac867688f2a9b9f9e149d7b6c269579007fb92a1b149c0d4fd6834d33b0015f40aa29f27d8e4c77b6f91fc8fb4191887a26f9e81d09677436dd307373f2309cce1c3bc47638002bfd26e594f3b8c13920d269e4129bd523b3c8edcecaf4f66b17c330a3e6aa3a438ca747c95d0e644db5565926a479e783c4bc295fe50eddb9adb3fec1f66c330dfa6c9f440385405957af1f79d2a38807ae51225baf1309749d2c9c5f7af50666e96d40e66b2d06ec05a272c5b6b09d3bb80fb6604649d9567c110c84a08ba0f422e0c28e7a6512384c3199f0cd6db7979c78d6f9a43250f4be8774960c8d5aaf39f206a8a8545f2fadde633e18f0fc5393e897d33728056ea0b10f61b79133723ecf22e37cd76bcbc5b3289d20b9e0096ec06e5f424009dbc32540db8be018fc3575f40a3dbfed5d937d6c7cf4685606a3f4b138af136640c55cf1b166171a7de13001e319e879b3c8c93e7d093ad550f9796d42ff4d7f1858187eba25cfbff55314715fa0107b260888245a3e7dc35fe16159b09d511a123ec038f5ef72dc043a5cea3c0f99967d7cb2872ff3b925aa1768716b2b1b226df808f3d22d100d36684da40ca8e23e57d18f113c1626756042a63fe36fe8229ac4c1b8eca1d5288d17ee3744b058945792a0b557565ad0de58a324ba54ce1df5c0af05f3bc5af231465dab22dd916c82b8e86bb7d68096e06fa970918e1c977d03caab4f337ea15e4b8c53b3b39dc048138ec7fcd824c051d7e61020982a3cf650aab0923054a4638f2ccf93d014f89753357afd6370cff89a8974a0cfa12311db460193cadd6eebb067298d83b09d7d28966e75b0464cc148c78e44730e6b837b3031cea8a4da736596f4d96994c67f9812439acec2dd0fcbd662a510a270bcd0327aa1e98af47a58012955f12fda943937a856ff57e612e16bd05d2e4036659ab877fe68f3e423d0fdfd6523ed55423f61ec056e0333c0ff561b6e009e4e561b0232f8e6506a020789709df1d436d7f01ee75c668959ed4a404e1d528d11410b9061acc48968ca4af7e72740952874a5e028d8964561a08268b95a36e60509af5547e5acdde67f4db090dbbf95089d2076906100d1b9596d01ec9afc8df33d5a1f1367887918e2319a748b86aa638927e99a7dffe8ec40db662674c62109b61ec8cb868bbe1f09eaa0321df42fd0d0ef3f841a83c73102d4483a60b5891f3d2e37f82607e4b98b916aab0a1bdfda3037a3cd528888ae4833d3f6371972708aa5d8edcf7ae7be1285c0e0a064fdff03393dae6f093f90986e0a3ad9685870a0f02ae90e6d19d5c843e24fea46a7f4fe2ed93680383d44de9c3e3ffcb2a305ad5bbe1b12d42ef886d570b6bc7f7cc557df405d7175aaaf4c64603a0eee0be774972814d7ce428d944a347d5eb6e90b8ef492c05465ea347f32bc6213426202207c99b356e8a37ccaed2775613d743ed699c0915e0c223e28258d9300c4e12fcd5ed8633237295fd148a5459df291e486dd107769c2585870855554c859a3a023382cdd57d7f219329e8688040532a3c29f8a7fa206229e8eb25a32c13a8cadd49b9b8fb89824257c8e28fbeefd75d232ccf533d14ac7359071a18b433558d52adbe736fea62cec3e750267c64c1109c3bf1fd6513f49df589cfa60b041880fda493bd0794c782b41ff9797be8905d598375f9f9955bada1d90d127c3f8b12b6f2e5fa7df2513b0a9749117a89178239ec09e58ead4b23ec45c3715c65ef03896895ae146fc6a24084e8eb62c3dc9a020ac3f7f132eb5556f001b91ab9fec4ea6476b9028474a0e057c2f21850097a54182699f22591c647b20099675008bcb5ad9ccb978ae772445b2952a85d5fbb920eb4635c9bb9117a91297c2982b03d3f0173fbc3bf32a22a3686d7d955d821746046105739c38929c9b58e1beeb0a3c5217e76f2c80eda1ec3f4336f1564329cd4b2bfd9089527e937d7ac2f87bf1b32c51df5dbb4b63a9662ae52d11ee99e1fd14756436e6936dc8a49c762de855c8288c8ba5620f5e52caf9cf1855df1259ff1ace5553407e7aff8a39f74c47a84303cf2f85a67e0e"]}]}, 0xec4}}, 0x0) 12:35:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)="77e60a7ec3e81174ff0ea5727dc9bfd5", 0x10) 12:35:52 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r0}}, 0x48) 12:35:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 12:35:52 executing program 1: socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x3, 0x0) 12:35:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 12:35:52 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f00000003c0)) 12:35:52 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r0}}, 0x48) 12:35:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x0, 0x8000000803, 0x0) write(r3, &(0x7f0000000000), 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) 12:35:52 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 12:35:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000001600)={0x1024, 0x0, 0x1, 0x801, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x8}, [@typed={0xc, 0x4d, 0x0, 0x0, @u64=0x8000}, @nested={0x1004, 0x0, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @fd}, @generic="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", @generic, @typed={0x14, 0xdfe, 0x0, 0x0, @ipv6=@local}]}]}, 0x1024}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:35:53 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12:35:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:53 executing program 0: r0 = socket(0xa, 0x3, 0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 12:35:53 executing program 3: syz_open_dev$usbfs(&(0x7f00000015c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x402080) 12:35:53 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) sendmsg$nl_route(r0, 0x0, 0x0) 12:35:53 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 12:35:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0717"], 0x30}}, 0x0) 12:35:53 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 12:35:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 12:35:54 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20000805) 12:35:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1000, 0x2) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000340)="5d8952bc81e1e1f0", 0x8}], 0x1) 12:35:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)={0x20, 0x11, 0x0, 0x801, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 12:35:54 executing program 0: socketpair(0x1d, 0x0, 0x7, &(0x7f0000000300)) 12:35:54 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlink(&(0x7f00000000c0)='./file0/file0\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) 12:35:54 executing program 1: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) 12:35:55 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) 12:35:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:55 executing program 0: syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0xa0700) 12:35:55 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x103400, 0x0) 12:35:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:55 executing program 4: timer_create(0x0, 0x0, &(0x7f00000006c0)) 12:35:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:35:56 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000780)='trusted.overlay.upper\x00', &(0x7f00000007c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "b6f752e9f5be1462bffd13843518857b"}, 0x15, 0x0) 12:35:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12:35:56 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 12:35:56 executing program 1: r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r0) 12:35:56 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 12:35:57 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000880)) 12:35:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:57 executing program 1: socketpair(0xa, 0x0, 0xfffffffb, &(0x7f0000000000)) 12:35:57 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 12:35:57 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x100000}, 0x0, 0x0, 0x0) 12:35:57 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7f]}, 0x8}) 12:35:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:57 executing program 3: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xae0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:35:57 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) 12:35:57 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x100000}, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 12:35:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xec4, 0x7, 0xa, 0x5, 0x0, 0x0, {0xd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xe98, 0x4, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4}}]}, {0xd8, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa876}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @void}]}, {0x474, 0x1, 0x0, 0x1, [@masq={{0x9, 0x1, 'masq\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x4}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8}]}}, @range={{0xa, 0x1, 'range\x00'}, @val={0x308, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "5484cc9ddae12aaa657f991ca0a6d1a50baa32fb78bbffbd865353bea1b1ba8c2c9ee2b3c47a072c25810931bc1330a8ea47b6b945b4ad68d09fc7c75ad193b492c0e6f2fa13027ee0712ea9b092ab03b5c1a738ad1fec1de5902a846b37a32360921da1301f715efb1fcbed87ec"}]}, @NFTA_RANGE_TO_DATA={0x90, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x15, 0x1, "d2debb1cf3ca6f26bd3e52cebbd02b35df"}, @NFTA_DATA_VALUE={0x19, 0x1, "a5b21114f81afa178c73ba11e13d22bc4c4f5e832c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_FROM_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "283a2b2f06b159040c8badea34a5ca02eeb5d6ac4236a259366c988f9e79683b0a3cf9fe6058b787c2f9a4501cd1765c99a940f17b330ee74c9281405aca51a7f1d3637073027b38d5c6fd6daada9e4cd010d7a76dc9a0729054aa1bf2290f6ce19da5e622dafaa4d48c65223bf3478bb178b3cb3fcf217e014fd5e8de39099589cea22be215bb1de77336fbe64923bd44794936362782fbd3417703fea1bc4b6173562704d0f4573b254f6f93e2b3064c"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "e3c8e9872777ed153c78bb5e19b52f229ef787ec10d1711cdeefa643e72c"}, @NFTA_DATA_VALUE={0x61, 0x1, "70e45e46a11707644be0a9f2db012b6c16831b435a38f5f65cf285fc1cd474ec7bb9458df480054f0688dedd3ab1cede0436547cf95c4e1de3039a63e6652f1693005e3f12bea6649d2c7bb094b1f45c0c41a308c9db15bbb934721600"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}]}, {0x5b8, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x4bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "27685d0bfb0e0cf5"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x95, 0x1, "6c610bd7564fe0820534b3ae6da93c6b6a66d4269c266c013a627640e1b454a8367e0599f1d60bb1114a435de3a4469098df32a0bd729b4d501d0865c110c2796ee0dec044ba085baa373173cb772519b4f1895d1dfa67a2b5b531142551b23815aeb6e656ab28b831b3e3896d2c6cb3018b0b29dd8f69b3fc2c8f2c224b5106e751a79b111364119ca7e102bc3572ba59"}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "b7341af14c9c6cb9d3ec83e09a14786a48f260a397e3db3eae2f1fe6dac0242b9a11a7c56b588f2958b1d39c366f26facb863e2c46dcda0409e2beb2450b74c74ede0529d38f571600da5bb4237943a6db835b499111907831258f0c7536533105ebc8e7d84a1578c2afdf4d0bfdb2587a4d98884ff609a69f32c85cebd143709a587cf4a7033461b9a3aebf5ce3d4a2a4eab5479fc0573ff263749b79968623a1b2e0517c48777fb626169a5c8e55f6af6467ebdb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "a0eb0b1f620e5a4fc2cc7ef39191f49a0bad1959a3201ad1501ac901a3dee94ba3e3f7e667dc8161112c6a13462b2e599c313cb63de55963277febfb75e66f684332897cae031cececc53f95befe60c0845f2dfa4d774df2efca1442f8a9c1cbcfea30da81fffd26917569d2e7ebbb9c56c115625abb8f485b915a4da1dcbd1601c2b5ecea359a4e4c3ef60e4648b0a3b99805640c376bed1d09abf9284b38e8d30198f9dd4b157aa52ce4c5dd03c21322882272b2dd3678b4981a9a48e37912f747a70effc6ca3fd186a7139c9f17a2324a200d9c1b7207550a73acab0c968e0d543063cc"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "75b00861bdfda79b97b84237328acece7daaf523ef2ff032f48a92f87a4192feb80d6dcf7c9ee9b3daf6a96305579ec3c1a5dcd26b271420ef9d756a66ba5006de11dc0277d14c4364f94173b7bf40529362f71d3657f1eab5c5f1ffac990fcd56e0c16110436d6ff3f885885586168687d73728a5e6a0d4b307c161b283"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "c571f270941f240b5783103ce811a4ef82acdb533379516f6123bbc52eab48fe59bb51f1a603e23ec05dbd9caa3403ebfffa02a9cec6eaef897ccfb27fe25c1aaaba444f3957d786a753ebda65768bbcda33ef4441"}]}]}}, @match={{0xa, 0x1, 'match\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8}]}}]}, {0x304, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x2c4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "02144a7e9601cad3a700b77ce824efec40c8d4c173143bc6a572f932ef835a05eb08a175d1bf68a4ae1ddb261931ebee7f68f5846af923e2d0ad6eb8c5fe27b54f16a21c840ebad836f2ce8d33606c9dac74b29ff5d0ec5c578e0511b8f405f7b3ef5e7594a80f130c6349a439a38a791eba95550d3ac1807c6f3b4e55b844ab2e196fd39b1c7fcea54f50710d4656136031e46fdbc0b536f8961b54c7c9be3c56020d9ab9a5695a0239576dc0fe5e0462"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "fe654d3b754401251f74fc9a4cb2736af0bb6300acbaaee253b1ab8f1f3dd886e6f78c910f97d417199ddcb0aa25ae10a4b194630f2dca15efdc631b03f4bb4d61d5c1279144aaeb80d423eaefea979bac639db79558f1dc8f092e15493b41f94c5766bc8f888251b1d60c1fdec3aa61f97e8f38a564eed900d5cef2dfc01089755060b01c0630e6e69293df420b1bdf10cd145bbca5e393d8902a31d0a73026eeb567a2b2e4662d3e0bc715a48c4d90885f4ae96eb0206477fd0b0cac5a28705760d1fceb2a21f3df0458340dbdef81d26949c691"}, @NFTA_DATA_VALUE={0xb5, 0x1, "10399e3a683ab3139639a27f5a50693ea30db960f83cfe0f604cbc3abf493dffd438672c161f6fa3a5a82e42bd00ed086fcee919ccf40a50f5d2ee958c6be049e2f56c6c3a3bf0457758199bfceaa4c7c22710c7619a4a3fa67b215e057aa25f1e3b65cdbf917042c5c1023f08e87e756f5b4a6e88ae019f8ef9da7d6bbda8f6e68b8d43adaccdcb6049d04dc1ad37fc58b0fd2d2d5a56c2a895fe30abb5a5de9a7516eb9339d2f7d40f0ccce36087d106"}, @NFTA_DATA_VALUE={0x22, 0x1, "d4a817cd8ef44c94baceb6d8d31732961539721c01e5575915c08d0a805f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}]}]}]}, 0xec4}}, 0x0) 12:35:58 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) 12:35:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xec4, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xe98, 0x4, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4}}]}, {0xd8, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffa2}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @void}]}, {0x474, 0x1, 0x0, 0x1, [@masq={{0x9, 0x1, 'masq\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x4}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8}]}}, @range={{0xa, 0x1, 'range\x00'}, @val={0x308, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "5484cc9ddae12aaa657f991ca0a6d1a50baa32fb78bbffbd865353bea1b1ba8c2c9ee2b3c47a072c25810931bc1330a8ea47b6b945b4ad68d09fc7c75ad193b492c0e6f2fa13027ee0712ea9b092ab03b5c1a738ad1fec1de5902a846b37a32360921da1301f715efb1fcbed87"}]}, @NFTA_RANGE_TO_DATA={0x90, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x15, 0x1, "d2debb1cf3ca6f26bd3e52cebbd02b35df"}, @NFTA_DATA_VALUE={0x19, 0x1, "a5b21114f81afa178c73ba11e13d22bc4c4f5e832c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_FROM_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "283a2b2f06b159040c8badea34a5ca02eeb5d6ac4236a259366c988f9e79683b0a3cf9fe6058b787c2f9a4501cd1765c99a940f17b330ee74c9281405aca51a7f1d3637073027b38d5c6fd6daada9e4cd010d7a76dc9a0729054aa1bf2290f6ce19da5e622dafaa4d48c65223bf3478bb178b3cb3fcf217e014fd5e8de39099589cea22be215bb1de77336fbe64923bd44794936362782fbd3417703fea1bc4b6173562704d0f4573b254f6f93e2b3064c99a84b"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "e3c8e9872777ed153c78bb5e19b52f229ef787ec10d1711cdeefa643e72c"}, @NFTA_DATA_VALUE={0x61, 0x1, "70e45e46a11707644be0a9f2db012b6c16831b435a38f5f65cf285fc1cd474ec7bb9458df480054f0688dedd3ab1cede0436547cf95c4e1de3039a63e6652f1693005e3f12bea6649d2c7bb094b1f45c0c41a308c9db15bbb934721600"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}]}, {0x5b8, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x4bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "27685d0bfb"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x95, 0x1, "6c610bd7564fe0820534b3ae6da93c6b6a66d4269c266c013a627640e1b454a8367e0599f1d60bb1114a435de3a4469098df32a0bd729b4d501d0865c110c2796ee0dec044ba085baa373173cb772519b4f1895d1dfa67a2b5b531142551b23815aeb6e656ab28b831b3e3896d2c6cb3018b0b29dd8f69b3fc2c8f2c224b5106e751a79b111364119ca7e102bc3572ba59"}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "b7341af14c9c6cb9d3ec83e09a14786a48f260a397e3db3eae2f1fe6dac0242b9a11a7c56b588f2958b1d39c366f26facb863e2c46dcda0409e2beb2450b74c74ede0529d38f571600da5bb4237943a6db835b499111907831258f0c7536533105ebc8e7d84a1578c2afdf4d0bfdb2587a4d98884ff609a69f32c85cebd143709a587cf4a7033461b9a3aebf5ce3d4a2a4eab5479fc0573ff263749b79968623a1b2e0517c48777fb626169a5c8e55f6af6467ebdb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "a0eb0b1f620e5a4fc2cc7ef39191f49a0bad1959a3201ad1501ac901a3dee94ba3e3f7e667dc8161112c6a13462b2e599c313cb63de55963277febfb75e66f684332897cae031cececc53f95befe60c0845f2dfa4d774df2efca1442f8a9c1cbcfea30da81fffd26917569d2e7ebbb9c56c115625abb8f485b915a4da1dcbd1601c2b5ecea359a4e4c3ef60e4648b0a3b99805640c376bed1d09abf9284b38e8d30198f9dd4b157aa52ce4c5dd03c21322882272b2dd3678b4981a9a48e37912f747a70effc6ca3fd186a7139c9f17a2324a200d9c1b7207550a73acab0c968e0d543063cc"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "75b00861bdfda79b97b84237328acece7daaf523ef2ff032f48a92f87a4192feb80d6dcf7c9ee9b3daf6a96305579ec3c1a5dcd26b271420ef9d756a66ba5006de11dc0277d14c4364f94173b7bf40529362f71d3657f1eab5c5f1ffac990fcd56e0c16110436d6ff3f885885586168687d73728a5e6a0d4b307c161b2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "c571f270941f240b5783103ce811a4ef82acdb533379516f6123bbc52eab48fe59bb51f1a603e23ec05dbd9caa3403ebfffa02a9cec6eaef897ccfb27fe25c1aaaba444f3957d786a753ebda65768bbcda33ef4441"}]}]}}, @match={{0xa, 0x1, 'match\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8}]}}]}, {0x304, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x2c4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "02144a7e9601cad3a700b77ce824efec40c8d4c173143bc6a572f932ef835a05eb08a175d1bf68a4ae1ddb261931ebee7f68f5846af923e2d0ad6eb8c5fe27b54f16a21c840ebad836f2ce8d33606c9dac74b29ff5d0ec5c578e0511b8f405f7b3ef5e7594a80f130c6349a439a38a791eba95550d3ac1807c6f3b4e55b844ab2e196fd39b1c7fcea54f50710d4656136031e46fdbc0b536f8961b54c7c9be3c56020d9ab9a5695a0239576dc0fe5e04620f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "fe654d3b754401251f74fc9a4cb2736af0bb6300acbaaee253b1ab8f1f3dd886e6f78c910f97d417199ddcb0aa25ae10a4b194630f2dca15efdc631b03f4bb4d61d5c1279144aaeb80d423eaefea979bac639db79558f1dc8f092e15493b41f94c5766bc8f888251b1d60c1fdec3aa61f97e8f38a564eed900d5cef2dfc01089755060b01c0630e6e69293df420b1bdf10cd145bbca5e393d8902a31d0a73026eeb567a2b2e4662d3e0bc715a48c4d90885f4ae96eb0206477fd0b0cac5a28705760d1fceb2a21f3df0458340dbdef81d26949c691"}, @NFTA_DATA_VALUE={0xbd, 0x1, "10399e3a683ab3139639a27f5a50693ea30db960f83cfe0f604cbc3abf493dffd438672c161f6fa3a5a82e42bd00ed086fcee919ccf40a50f5d2ee958c6be049e2f56c6c3a3bf0457758199bfceaa4c7c22710c7619a4a3fa67b215e057aa25f1e3b65cdbf917042c5c1023f08e87e756f5b4a6e88ae019f8ef9da7d6bbda8f6e68b8d43adaccdcb6049d04dc1ad37fc58b0fd2d2d5a56c2a895fe30abb5a5de9a7516eb9339d2f7d40f0ccce36087d106293fa78a3f2407b0"}, @NFTA_DATA_VALUE={0x1d, 0x1, "d4a817cd8ef44c94baceb6d8d31732961539721c01e5575915"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}]}]}]}, 0xec4}}, 0x40) 12:35:58 executing program 3: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x9effffff) 12:35:58 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) dup2(r1, r0) 12:35:58 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 1272.096179][T23775] usb 1-1: new high-speed USB device number 8 using dummy_hcd 12:35:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:35:58 executing program 3: memfd_create(&(0x7f00000000c0)='/dev/uinput\x00', 0x6) 12:35:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 1272.477076][T23775] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.487307][T23775] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 12:35:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r0, r1, 0x0) 12:35:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x8913, &(0x7f0000000040)) [ 1272.697300][T23775] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 1272.706686][T23775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.714778][T23775] usb 1-1: Product: syz [ 1272.719266][T23775] usb 1-1: Manufacturer: syz [ 1272.725148][T23775] usb 1-1: SerialNumber: syz 12:35:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) [ 1273.106680][T23775] usbhid 1-1:1.0: can't add hid device: -22 [ 1273.112969][T23775] usbhid: probe of 1-1:1.0 failed with error -22 [ 1273.167106][T23775] usb 1-1: USB disconnect, device number 8 [ 1273.876062][T23775] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1274.278455][T23775] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.288639][T23775] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.478126][T23775] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 1274.487562][T23775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.495875][T23775] usb 1-1: Product: syz [ 1274.500143][T23775] usb 1-1: Manufacturer: syz [ 1274.504836][T23775] usb 1-1: SerialNumber: syz 12:36:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x0, 0x3, 0x7}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) 12:36:01 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='1\x00', 0x2) 12:36:01 executing program 0: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 12:36:01 executing program 5: timer_create(0x0, &(0x7f0000000200)={0x0, 0xf}, &(0x7f0000000240)) 12:36:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:36:01 executing program 1: stat(&(0x7f0000000300)='./file0\x00', 0x0) [ 1274.875737][T23775] usbhid 1-1:1.0: can't add hid device: -22 [ 1274.882040][T23775] usbhid: probe of 1-1:1.0 failed with error -22 [ 1274.959158][T23775] usb 1-1: USB disconnect, device number 9 12:36:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x1000, 0x2) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x58) close(r0) 12:36:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3f2a0fba"}, 0x0, 0x0, @fd}) 12:36:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xf7, 0x1f, 0x5}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x50, &(0x7f0000000080)}, 0x9) 12:36:02 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x7}, 0x0) 12:36:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x8, 0x4, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) 12:36:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:02 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 12:36:02 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x0) 12:36:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xec4, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xe98, 0x4, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4}}]}, {0xd8, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @void}]}, {0x474, 0x1, 0x0, 0x1, [@masq={{0x9, 0x1, 'masq\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x4}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8}]}}, @range={{0xa, 0x1, 'range\x00'}, @val={0x308, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "5484cc9ddae12aaa657f991ca0a6d1a50baa32fb78bbffbd865353bea1b1ba8c2c9ee2b3c47a072c25810931bc1330a8ea47b6b945b4ad68d09fc7c75ad193b492c0e6f2fa13027ee0712ea9b092ab03b5c1a738ad1fec1de5902a846b37a32360921da1301f715efb1fcbed87"}]}, @NFTA_RANGE_TO_DATA={0x90, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x15, 0x1, "d2debb1cf3ca6f26bd3e52cebbd02b35df"}, @NFTA_DATA_VALUE={0x19, 0x1, "a5b21114f81afa178c73ba11e13d22bc4c4f5e832c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_FROM_DATA={0x1f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "283a2b2f06b159040c8badea34a5ca02eeb5d6ac4236a259366c988f9e79683b0a3cf9fe6058b787c2f9a4501cd1765c99a940f17b330ee74c9281405aca51a7f1d3637073027b38d5c6fd6daada9e4cd010d7a76dc9a0729054aa1bf2290f6ce19da5e622dafaa4d48c65223bf3478bb178b3cb3fcf217e014fd5e8de39099589cea22be215bb1de77336fbe64923bd44794936362782fbd3417703fea1bc4b6173562704d0f4573b254f6f93e2b3064c"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "e3c8e9872777ed153c78bb5e19b52f229ef787ec10d1711cdeefa643e7"}, @NFTA_DATA_VALUE={0x61, 0x1, "70e45e46a11707644be0a9f2db012b6c16831b435a38f5f65cf285fc1cd474ec7bb9458df480054f0688dedd3ab1cede0436547cf95c4e1de3039a63e6652f1693005e3f12bea6649d2c7bb094b1f45c0c41a308c9db15bbb934721600"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}]}, {0x5b8, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x4bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "27685d0bfb"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x95, 0x1, "6c610bd7564fe0820534b3ae6da93c6b6a66d4269c266c013a627640e1b454a8367e0599f1d60bb1114a435de3a4469098df32a0bd729b4d501d0865c110c2796ee0dec044ba085baa373173cb772519b4f1895d1dfa67a2b5b531142551b23815aeb6e656ab28b831b3e3896d2c6cb3018b0b29dd8f69b3fc2c8f2c224b5106e751a79b111364119ca7e102bc3572ba59"}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "b7341af14c9c6cb9d3ec83e09a14786a48f260a397e3db3eae2f1fe6dac0242b9a11a7c56b588f2958b1d39c366f26facb863e2c46dcda0409e2beb2450b74c74ede0529d38f571600da5bb4237943a6db835b499111907831258f0c7536533105ebc8e7d84a1578c2afdf4d0bfdb2587a4d98884ff609a69f32c85cebd143709a587cf4a7033461b9a3aebf5ce3d4a2a4eab5479fc0573ff263749b79968623a1b2e0517c48777fb626169a5c8e55f6af6467ebdb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "a0eb0b1f620e5a4fc2cc7ef39191f49a0bad1959a3201ad1501ac901a3dee94ba3e3f7e667dc8161112c6a13462b2e599c313cb63de55963277febfb75e66f684332897cae031cececc53f95befe60c0845f2dfa4d774df2efca1442f8a9c1cbcfea30da81fffd26917569d2e7ebbb9c56c115625abb8f485b915a4da1dcbd1601c2b5ecea359a4e4c3ef60e4648b0a3b99805640c376bed1d09abf9284b38e8d30198f9dd4b157aa52ce4c5dd03c21322882272b2dd3678b4981a9a48e37912f747a70effc6ca3fd186a7139c9f17a2324a200d9c1b7207550a73acab0c968e0d543063cc"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "75b00861bdfda79b97b84237328acece7daaf523ef2ff032f48a92f87a4192feb80d6dcf7c9ee9b3daf6a96305579ec3c1a5dcd26b271420ef9d756a66ba5006de11dc0277d14c4364f94173b7bf40529362f71d3657f1eab5c5f1ffac990fcd56e0c16110436d6ff3f885885586168687d73728a5e6a0d4b307c161b2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "c571f270941f240b5783103ce811a4ef82acdb533379516f6123bbc52eab48fe59bb51f1a603e23ec05dbd9caa3403ebfffa02a9cec6eaef897ccfb27fe25c1aaaba444f3957d786a753ebda65768bbcda33ef4441"}]}]}}, @match={{0xa, 0x1, 'match\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @void}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8}]}}]}, {0x304, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x2c4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "02144a7e9601cad3a700b77ce824efec40c8d4c173143bc6a572f932ef835a05eb08a175d1bf68a4ae1ddb261931ebee7f68f5846af923e2d0ad6eb8c5fe27b54f16a21c840ebad836f2ce8d33606c9dac74b29ff5d0ec5c578e0511b8f405f7b3ef5e7594a80f130c6349a439a38a791eba95550d3ac1807c6f3b4e55b844ab2e196fd39b1c7fcea54f50710d4656136031e46fdbc0b536f8961b54c7c9be3c56020d9ab9a5695a0239576dc0fe5e0462"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "fe654d3b754401251f74fc9a4cb2736af0bb6300acbaaee253b1ab8f1f3dd886e6f78c910f97d417199ddcb0aa25ae10a4b194630f2dca15efdc631b03f4bb4d61d5c1279144aaeb80d423eaefea979bac639db79558f1dc8f092e15493b41f94c5766bc8f888251b1d60c1fdec3aa61f97e8f38a564eed900d5cef2dfc01089755060b01c0630e6e69293df420b1bdf10cd145bbca5e393d8902a31d0a73026eeb567a2b2e4662d3e0bc715a48c4d90885f4ae96eb0206477fd0b0cac5a28705760d1fceb2a21f3df0458340dbdef81d26949c691"}, @NFTA_DATA_VALUE={0xbd, 0x1, "10399e3a683ab3139639a27f5a50693ea30db960f83cfe0f604cbc3abf493dffd438672c161f6fa3a5a82e42bd00ed086fcee919ccf40a50f5d2ee958c6be049e2f56c6c3a3bf0457758199bfceaa4c7c22710c7619a4a3fa67b215e057aa25f1e3b65cdbf917042c5c1023f08e87e756f5b4a6e88ae019f8ef9da7d6bbda8f6e68b8d43adaccdcb6049d04dc1ad37fc58b0fd2d2d5a56c2a895fe30abb5a5de9a7516eb9339d2f7d40f0ccce36087d106293fa78a3f2407b0"}, @NFTA_DATA_VALUE={0x35, 0x1, "d4a817cd8ef44c94baceb6d8d31732961539721c01e5575915c08d0a805f2afa477e9910b889ab421b97dc68e5639eb35a"}]}]}}]}]}]}, 0xec4}}, 0x0) 12:36:02 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:02 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) readahead(r0, 0x0, 0x0) 12:36:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xea1, 0x0, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="01298c6a723e2dbcab9c8a3433995073d282cf2a41b7f3b02517d714f425ee66f3fc18dacf808dca254393d7f4cf7d95fc900e6aff6eef1b8573a5cba374120c86e33b75046dd9684f72cf40d55ca19f348cbe6ffa6681fbb5cabcc8f5995a4c68fbe3984f5988c38ee12214b3037db2991158a98578c846718efa5cf5f058800d9d422e4b132c24b00f9e152d0fc0584cfce4388746125b42f09a168c3fbcaf036540673c4ec811f657f584a735c78a701efa6ee134c6fbd5a8bbd80702fafea3140774a7dcab9cdba502ad445b8f49d35ec6590c5e38a1f243b0a9379c447d06d2428f6771f26d823d14b5fecae5cbd5f453abab0a8bb6518e8d1d0fb3de5b5f6d58b1edcdbc74c050bbfe27b659f2cd7a277c6e8773e73d52918c344a64f3e3cb75b2b1c528225ccf6bd7aded9958f07a2fab32f28a0ccee3a7b213e5c818ecf0c1bcb59909990787d5c5ca5978b7f73585ebd5761f31a83f11b438c92fd79cdd9f3182ea995d52a4541e11e718649e1155b8c313e3334215c4e385b175f8e3e49b81e1d571de42ce4457947dc597e1af15a64f48957b5ebc314b6f18b9ccb2dfa202528403904890513ca6458bb164a068faff3c91ed1161dce96abe55ee60ca833a63e69517a4745164450390b7ffd0c498f1a337615d66779c08b5525554262f7100de099b6d3ce7fdb1bc179b06044fad93c45c28cdaf57dd8861264e81360d317becff42d20af29d5cc9d9b59513e0d0cefbeab1073298706ca16de175cba47d46ebc213bb002751b6b7ec89aa02414a407d97e002f5c26699369a27a37e21f0c46e26081f85498baf120cf18f0246e9db4d4d8425b4a9d9e96e9379e0849ff8290233cbcd3273454e883d015a6b07e0e8759abe7429b84843ff4e0b61b7eb243850dd0977d6ecb8b303477289f24e9bf0d0f1f752e89ae8cca68a4b7b1d241a1329b1e5ee2dfd07a711b7ee59704f9c68d480b95b055947d60091f4ac4738b753870020cf337590ece871ee00b87409b22b2d07a59fd046559e849d5442fe10ac1ec7e871fb7ba5acc80e9e51385eb7b7123a4b8c0752743c6e6b1a01476b8bfc5bd65380c333ff1250ec976d7ca5ee6541e8d4eb8ee2f9a056c77cca9c8787ac7a98c65709dfddccfceb413f3c25b1db7e8db4576caa5eeefa34f35ced92a9bb32eb1a1d16aac0317f016f1bf629cdfb4f257897ada2583f8e6e6c5fe8b333b698c10dd4e1b2d08f436161f408000e809cea701e5ebfa78fb37c21cdd01db9a61198f78ee0016535dd573f8690631d17c35cacec1e88009e7b1b33624aae0334f96af97e27ad6441445d81800109f991335a592400e235d0d6e953cbf9a1d1870231d25daf246a2eee64300502fffbcb37bb42359417fb4162e154d39b3956de240a70d6e9f665c41a35654d6ae84d58429a26a5a347ebbd6695c07ef43bb13cbba383dcdd44f8b9c71fd0bb69416bc88e48e7b45cac9ebd673f4c62f0b608d5fb588d493cf328fd300ec64c8f35792be4dbf52ccea6e8921e513f676fad2690e41afaf03e695b1a05953bf8ab9a256d175bb8c975f4332257ce83a52828a4bafa92f882894bff221843037f40b8822fa149c8406d511f72fd24d62d998546f942b0a67145af755e7c3c27230f1a5e373ef19aec50469a9bd004fabda880278c3ecb7c3236aa3812aa6dab35a8338a51817e8fad280097d3d5be3e0520fa32fcc4fe278c974531be0ed843bfd3da8a4721c1a6fc15f867697dfac5e7f126384ca9403218224ccafe89d56a4621362927d01b5c5970d1c20b4e66b1837185fb7709278854a2aaeefc7454ef31cd91a385bc74ff8936241af94bbbcc17f32195f2c8ae181b2aed99862e563f04d6fa68330202fe2c1a8248c681ce63084a9fe297f3cd4df1a87352b0a1bda378c6266439ca30a60143b3a6c98620978264379781436adb7bfc7406840eee3bff4a178ee5a2cf7d866483eb56ea940ea007c765fcc768a0d2204a1d1b5e3f6312534b60c586f707121ca39e7093709814b6b8d69022580fb19710771a9d3f20f1e7757c77b1b66329d48ee9c68016cc94e9dcea22128f537160f890da3436b347062f7acfe7351c854c3fd5e43a2fa613dd8c809bdf194f86fd7b2d44c1bc80564b0e3efba8562d50a022eb451abc37b4f5256b2391ca9a8307d4130669d0e6b38c6b172fd1634c8836d87bc5e6c720e8d29e18a6b78ed1aeada153095e7bc1ce17efecccad0ae4ac32262efb678329db3e2dd98d3e73d8e7227f4663fce71bcdf098f824311973f0389330b845613b97b378631fdd4e0c84453c6d6de956db00c3cfff25ca2b1f38289b326ec45a502bb553ec893e2f19b9798c801c64b0e19dd581f349d8bd946e7808dd3c6d9da6d3bf79db45df80e8467c78bea306ce6844afdb26eeecdb2184a5cb33cee820e5491a8c2f7709a938ed74d3b1010a84960c4c6c0c8b6bdbd0c0c3806b8eff0a644ccc4d29bc808da76235c19e52206253b52e3bc3bf8d7a06a0cc9816fe49bc7a29d7739a7cc7258863fbd93595b3c6f2e0e78076eda12178c2849fa8e8c4a8d507adbe68db2ef8f0e4ce67968a9e2986f3c25ce63a675d8ae7a6140bd0032363b2f4503b950ce02206f9fc25b7d0d1ca4a126854a9a89acc48b9e58b95c9ad6a8d53ec0f024cba6d159a2790a50d3492082857fd1f93dcd743a86035b829b56ecf2259c2c7d3e2464a25c12160c5045f27251e87ef8c3c5b333cc25202eac7b92b3db719e71725ae3ce1cbb87ef910166dfa24b2a67586822bfa224145c39d50cd7b465c6a59c7571ef8ac5041bd23203061a972d24687309d7160299b9619249ed4b268d4f40badf00ae19cc9cd631db7982d12b0b487a0c305d33131c2b976096e05cce6189c2c9eb143b2b43d6aad619f53ea4c322a4e5cf2e59fb6ac805adbbdd1a2897df493d8bb1579dc1f77efdc36288e4f114a7e3c23a34bd1b9443d648043f8c653b7e38762d459cc8d847aaec0324ce4ec3931c329e44240740885c0707e8be573431ed31dcdecf565b061f7f86a1be0659843a4ee16ed776d2e1d65a740feb4ad658a84e4fc699334ea8385be0e2570d2b88e787154bd88e4eedf9e54ffabc56364247eb283264ee90695aac335db4b008a16e7d01283fedf35a7cae55d438ff4820ac867688f2a9b9f9e149d7b6c269579007fb92a1b149c0d4fd6834d33b0015f40aa29f27d8e4c77b6f91fc8fb4191887a26f9e81d09677436dd307373f2309cce1c3bc47638002bfd26e594f3b8c13920d269e4129bd523b3c8edcecaf4f66b17c330a3e6aa3a438ca747c95d0e644db5565926a479e783c4bc295fe50eddb9adb3fec1f66c330dfa6c9f440385405957af1f79d2a38807ae51225baf1309749d2c9c5f7af50666e96d40e66b2d06ec05a272c5b6b09d3bb80fb6604649d9567c110c84a08ba0f422e0c28e7a6512384c3199f0cd6db7979c78d6f9a43250f4be8774960c8d5aaf39f206a8a8545f2fadde633e18f0fc5393e897d33728056ea0b10f61b79133723ecf22e37cd76bcbc5b3289d20b9e0096ec06e5f424009dbc32540db8be018fc3575f40a3dbfed5d937d6c7cf4685606a3f4b138af136640c55cf1b166171a7de13001e319e879b3c8c93e7d093ad550f9796d42ff4d7f1858187eba25cfbff55314715fa0107b260888245a3e7dc35fe16159b09d511a123ec038f5ef72dc043a5cea3c0f99967d7cb2872ff3b925aa1768716b2b1b226df808f3d22d100d36684da40ca8e23e57d18f113c1626756042a63fe36fe8229ac4c1b8eca1d5288d17ee3744b058945792a0b557565ad0de58a324ba54ce1df5c0af05f3bc5af231465dab22dd916c82b8e86bb7d68096e06fa970918e1c977d03caab4f337ea15e4b8c53b3b39dc048138ec7fcd824c051d7e61020982a3cf650aab0923054a4638f2ccf93d014f89753357afd6370cff89a8974a0cfa12311db460193cadd6eebb067298d83b09d7d28966e75b0464cc148c78e44730e6b837b3031cea8a4da736596f4d96994c67f9812439acec2dd0fcbd662a510a270bcd0327aa1e98af47a58012955f12fda943937a856ff57e612e16bd05d2e4036659ab877fe68f3e423d0fdfd6523ed55423f61ec056e0333c0ff561b6e009e4e561b0232f8e6506a020789709df1d436d7f01ee75c668959ed4a404e1d528d11410b9061acc48968ca4af7e72740952874a5e028d8964561a08268b95a36e60509af5547e5acdde67f4db090dbbf95089d2076906100d1b9596d01ec9afc8df33d5a1f1367887918e2319a748b86aa638927e99a7dffe8ec40db662674c62109b61ec8cb868bbe1f09eaa0321df42fd0d0ef3f841a83c73102d4483a60b5891f3d2e37f82607e4b98b916aab0a1bdfda3037a3cd528888ae4833d3f6371972708aa5d8edcf7ae7be1285c0e0a064fdff03393dae6f093f90986e0a3ad9685870a0f02ae90e6d19d5c843e24fea46a7f4fe2ed93680383d44de9c3e3ffcb2a305ad5bbe1b12d42ef886d570b6bc7f7cc557df405d7175aaaf4c64603a0eee0be774972814d7ce428d944a347d5eb6e90b8ef492c05465ea347f32bc6213426202207c99b356e8a37ccaed2775613d743ed699c0915e0c223e28258d9300c4e12fcd5ed8633237295fd148a5459df291e486dd107769c2585870855554c859a3a023382cdd57d7f219329e8688040532a3c29f8a7fa206229e8eb25a32c13a8cadd49b9b8fb89824257c8e28fbeefd75d232ccf533d14ac7359071a18b433558d52adbe736fea62cec3e750267c64c1109c3bf1fd6513f49df589cfa60b041880fda493bd0794c782b41ff9797be8905d598375f9f9955bada1d90d127c3f8b12b6f2e5fa7df2513b0a9749117a89178239ec09e58ead4b23ec45c3715c65ef03896895ae146fc6a24084e8eb62c3dc9a020ac3f7f132eb5556f001b91ab9fec4ea6476b9028474a0e057c2f21850097a54182699f22591c647b20099675008bcb5ad9ccb978ae772445b2952a85d5fbb920eb4635c9bb9117a91297c2982b03d3f0173fbc3bf32a22a3686d7d955d821746046105739c38929c9b58e1beeb0a3c5217e76f2c80eda1ec3f4336f1564329cd4b2bfd9089527e937d7ac2f87bf1b32c51df5dbb4b63a9662ae52d11ee99e1fd14756436e6936dc8a49c762de855c8288c8ba5620f5e52caf9cf1855df1259ff1ace5553407e7aff8a39f74c47a84303cf2f85a67e0e"]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:36:03 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000780)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 12:36:03 executing program 1: timerfd_create(0x0, 0xf7a177f1b2d60c6a) 12:36:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:36:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:04 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) syz_genetlink_get_family_id$SEG6(0x0) 12:36:04 executing program 1: io_uring_setup(0x0, &(0x7f0000000200)) 12:36:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)={0x1024, 0x11, 0x1, 0x801, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x8}, [@typed={0xc, 0x4d, 0x0, 0x0, @u64=0x8000}, @nested={0x1003, 0x65, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}, @generic="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", @generic="062a5c6b047c7c399a476711165c18e1e231dd1c91c8134cb961b8267d6f3a9566cfddd933", @typed={0x14, 0xdfe, 0x0, 0x0, @ipv6=@local}]}]}, 0x1024}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:36:04 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0000c3"]) 12:36:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e80000000008010400000000000000000700000954000480080002400000ffff08000240000000040800024000000009080001400000ffff08000240000000020800024000000000080001400000000808000140800000000800014000000009080002400000000a0500030084000000440004800808000440000000090800044000000006080003400000000008000340ffffffbe08000640000000090a0004400000000208000340800000012c00048008000240"], 0xe8}}, 0x0) [ 1278.439308][T25966] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 12:36:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 12:36:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:05 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') clock_gettime(0x0, &(0x7f0000000040)) 12:36:05 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 12:36:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:05 executing program 1: fsopen(&(0x7f0000000000)='afs\x00', 0x0) 12:36:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 12:36:06 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x9effffff}}, 0x0) 12:36:06 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2010, r0, 0x8000000) 12:36:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:06 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) tee(r0, r1, 0x800, 0x0) 12:36:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 12:36:06 executing program 3: socket(0x0, 0x3, 0x0) 12:36:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @xdp, @tipc, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 12:36:06 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:06 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12:36:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:07 executing program 0: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) waitid(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) 12:36:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 12:36:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000002c0)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 12:36:07 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:08 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffff7f00000000}}, 0x0) 12:36:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, r1}}, 0x48) 12:36:08 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 12:36:08 executing program 3: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) 12:36:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:08 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)={0xec4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xea1, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="01298c6a723e2dbcab9c8a3433995073d282cf2a41b7f3b02517d714f425ee66f3fc18dacf808dca254393d7f4cf7d95fc900e6aff6eef1b8573a5cba374120c86e33b75046dd9684f72cf40d55ca19f348cbe6ffa6681fbb5cabcc8f5995a4c68fbe3984f5988c38ee12214b3037db2991158a98578c846718efa5cf5f058800d9d422e4b132c24b00f9e152d0fc0584cfce4388746125b42f09a168c3fbcaf036540673c4ec811f657f584a735c78a701efa6ee134c6fbd5a8bbd80702fafea3140774a7dcab9cdba502ad445b8f49d35ec6590c5e38a1f243b0a9379c447d06d2428f6771f26d823d14b5fecae5cbd5f453abab0a8bb6518e8d1d0fb3de5b5f6d58b1edcdbc74c050bbfe27b659f2cd7a277c6e8773e73d52918c344a64f3e3cb75b2b1c528225ccf6bd7aded9958f07a2fab32f28a0ccee3a7b213e5c818ecf0c1bcb59909990787d5c5ca5978b7f73585ebd5761f31a83f11b438c92fd79cdd9f3182ea995d52a4541e11e718649e1155b8c313e3334215c4e385b175f8e3e49b81e1d571de42ce4457947dc597e1af15a64f48957b5ebc314b6f18b9ccb2dfa202528403904890513ca6458bb164a068faff3c91ed1161dce96abe55ee60ca833a63e69517a4745164450390b7ffd0c498f1a337615d66779c08b5525554262f7100de099b6d3ce7fdb1bc179b06044fad93c45c28cdaf57dd8861264e81360d317becff42d20af29d5cc9d9b59513e0d0cefbeab1073298706ca16de175cba47d46ebc213bb002751b6b7ec89aa02414a407d97e002f5c26699369a27a37e21f0c46e26081f85498baf120cf18f0246e9db4d4d8425b4a9d9e96e9379e0849ff8290233cbcd3273454e883d015a6b07e0e8759abe7429b84843ff4e0b61b7eb243850dd0977d6ecb8b303477289f24e9bf0d0f1f752e89ae8cca68a4b7b1d241a1329b1e5ee2dfd07a711b7ee59704f9c68d480b95b055947d60091f4ac4738b753870020cf337590ece871ee00b87409b22b2d07a59fd046559e849d5442fe10ac1ec7e871fb7ba5acc80e9e51385eb7b7123a4b8c0752743c6e6b1a01476b8bfc5bd65380c333ff1250ec976d7ca5ee6541e8d4eb8ee2f9a056c77cca9c8787ac7a98c65709dfddccfceb413f3c25b1db7e8db4576caa5eeefa34f35ced92a9bb32eb1a1d16aac0317f016f1bf629cdfb4f257897ada2583f8e6e6c5fe8b333b698c10dd4e1b2d08f436161f408000e809cea701e5ebfa78fb37c21cdd01db9a61198f78ee0016535dd573f8690631d17c35cacec1e88009e7b1b33624aae0334f96af97e27ad6441445d81800109f991335a592400e235d0d6e953cbf9a1d1870231d25daf246a2eee64300502fffbcb37bb42359417fb4162e154d39b3956de240a70d6e9f665c41a35654d6ae84d58429a26a5a347ebbd6695c07ef43bb13cbba383dcdd44f8b9c71fd0bb69416bc88e48e7b45cac9ebd673f4c62f0b608d5fb588d493cf328fd300ec64c8f35792be4dbf52ccea6e8921e513f676fad2690e41afaf03e695b1a05953bf8ab9a256d175bb8c975f4332257ce83a52828a4bafa92f882894bff221843037f40b8822fa149c8406d511f72fd24d62d998546f942b0a67145af755e7c3c27230f1a5e373ef19aec50469a9bd004fabda880278c3ecb7c3236aa3812aa6dab35a8338a51817e8fad280097d3d5be3e0520fa32fcc4fe278c974531be0ed843bfd3da8a4721c1a6fc15f867697dfac5e7f126384ca9403218224ccafe89d56a4621362927d01b5c5970d1c20b4e66b1837185fb7709278854a2aaeefc7454ef31cd91a385bc74ff8936241af94bbbcc17f32195f2c8ae181b2aed99862e563f04d6fa68330202fe2c1a8248c681ce63084a9fe297f3cd4df1a87352b0a1bda378c6266439ca30a60143b3a6c98620978264379781436adb7bfc7406840eee3bff4a178ee5a2cf7d866483eb56ea940ea007c765fcc768a0d2204a1d1b5e3f6312534b60c586f707121ca39e7093709814b6b8d69022580fb19710771a9d3f20f1e7757c77b1b66329d48ee9c68016cc94e9dcea22128f537160f890da3436b347062f7acfe7351c854c3fd5e43a2fa613dd8c809bdf194f86fd7b2d44c1bc80564b0e3efba8562d50a022eb451abc37b4f5256b2391ca9a8307d4130669d0e6b38c6b172fd1634c8836d87bc5e6c720e8d29e18a6b78ed1aeada153095e7bc1ce17efecccad0ae4ac32262efb678329db3e2dd98d3e73d8e7227f4663fce71bcdf098f824311973f0389330b845613b97b378631fdd4e0c84453c6d6de956db00c3cfff25ca2b1f38289b326ec45a502bb553ec893e2f19b9798c801c64b0e19dd581f349d8bd946e7808dd3c6d9da6d3bf79db45df80e8467c78bea306ce6844afdb26eeecdb2184a5cb33cee820e5491a8c2f7709a938ed74d3b1010a84960c4c6c0c8b6bdbd0c0c3806b8eff0a644ccc4d29bc808da76235c19e52206253b52e3bc3bf8d7a06a0cc9816fe49bc7a29d7739a7cc7258863fbd93595b3c6f2e0e78076eda12178c2849fa8e8c4a8d507adbe68db2ef8f0e4ce67968a9e2986f3c25ce63a675d8ae7a6140bd0032363b2f4503b950ce02206f9fc25b7d0d1ca4a126854a9a89acc48b9e58b95c9ad6a8d53ec0f024cba6d159a2790a50d3492082857fd1f93dcd743a86035b829b56ecf2259c2c7d3e2464a25c12160c5045f27251e87ef8c3c5b333cc25202eac7b92b3db719e71725ae3ce1cbb87ef910166dfa24b2a67586822bfa224145c39d50cd7b465c6a59c7571ef8ac5041bd23203061a972d24687309d7160299b9619249ed4b268d4f40badf00ae19cc9cd631db7982d12b0b487a0c305d33131c2b976096e05cce6189c2c9eb143b2b43d6aad619f53ea4c322a4e5cf2e59fb6ac805adbbdd1a2897df493d8bb1579dc1f77efdc36288e4f114a7e3c23a34bd1b9443d648043f8c653b7e38762d459cc8d847aaec0324ce4ec3931c329e44240740885c0707e8be573431ed31dcdecf565b061f7f86a1be0659843a4ee16ed776d2e1d65a740feb4ad658a84e4fc699334ea8385be0e2570d2b88e787154bd88e4eedf9e54ffabc56364247eb283264ee90695aac335db4b008a16e7d01283fedf35a7cae55d438ff4820ac867688f2a9b9f9e149d7b6c269579007fb92a1b149c0d4fd6834d33b0015f40aa29f27d8e4c77b6f91fc8fb4191887a26f9e81d09677436dd307373f2309cce1c3bc47638002bfd26e594f3b8c13920d269e4129bd523b3c8edcecaf4f66b17c330a3e6aa3a438ca747c95d0e644db5565926a479e783c4bc295fe50eddb9adb3fec1f66c330dfa6c9f440385405957af1f79d2a38807ae51225baf1309749d2c9c5f7af50666e96d40e66b2d06ec05a272c5b6b09d3bb80fb6604649d9567c110c84a08ba0f422e0c28e7a6512384c3199f0cd6db7979c78d6f9a43250f4be8774960c8d5aaf39f206a8a8545f2fadde633e18f0fc5393e897d33728056ea0b10f61b79133723ecf22e37cd76bcbc5b3289d20b9e0096ec06e5f424009dbc32540db8be018fc3575f40a3dbfed5d937d6c7cf4685606a3f4b138af136640c55cf1b166171a7de13001e319e879b3c8c93e7d093ad550f9796d42ff4d7f1858187eba25cfbff55314715fa0107b260888245a3e7dc35fe16159b09d511a123ec038f5ef72dc043a5cea3c0f99967d7cb2872ff3b925aa1768716b2b1b226df808f3d22d100d36684da40ca8e23e57d18f113c1626756042a63fe36fe8229ac4c1b8eca1d5288d17ee3744b058945792a0b557565ad0de58a324ba54ce1df5c0af05f3bc5af231465dab22dd916c82b8e86bb7d68096e06fa970918e1c977d03caab4f337ea15e4b8c53b3b39dc048138ec7fcd824c051d7e61020982a3cf650aab0923054a4638f2ccf93d014f89753357afd6370cff89a8974a0cfa12311db460193cadd6eebb067298d83b09d7d28966e75b0464cc148c78e44730e6b837b3031cea8a4da736596f4d96994c67f9812439acec2dd0fcbd662a510a270bcd0327aa1e98af47a58012955f12fda943937a856ff57e612e16bd05d2e4036659ab877fe68f3e423d0fdfd6523ed55423f61ec056e0333c0ff561b6e009e4e561b0232f8e6506a020789709df1d436d7f01ee75c668959ed4a404e1d528d11410b9061acc48968ca4af7e72740952874a5e028d8964561a08268b95a36e60509af5547e5acdde67f4db090dbbf95089d2076906100d1b9596d01ec9afc8df33d5a1f1367887918e2319a748b86aa638927e99a7dffe8ec40db662674c62109b61ec8cb868bbe1f09eaa0321df42fd0d0ef3f841a83c73102d4483a60b5891f3d2e37f82607e4b98b916aab0a1bdfda3037a3cd528888ae4833d3f6371972708aa5d8edcf7ae7be1285c0e0a064fdff03393dae6f093f90986e0a3ad9685870a0f02ae90e6d19d5c843e24fea46a7f4fe2ed93680383d44de9c3e3ffcb2a305ad5bbe1b12d42ef886d570b6bc7f7cc557df405d7175aaaf4c64603a0eee0be774972814d7ce428d944a347d5eb6e90b8ef492c05465ea347f32bc6213426202207c99b356e8a37ccaed2775613d743ed699c0915e0c223e28258d9300c4e12fcd5ed8633237295fd148a5459df291e486dd107769c2585870855554c859a3a023382cdd57d7f219329e8688040532a3c29f8a7fa206229e8eb25a32c13a8cadd49b9b8fb89824257c8e28fbeefd75d232ccf533d14ac7359071a18b433558d52adbe736fea62cec3e750267c64c1109c3bf1fd6513f49df589cfa60b041880fda493bd0794c782b41ff9797be8905d598375f9f9955bada1d90d127c3f8b12b6f2e5fa7df2513b0a9749117a89178239ec09e58ead4b23ec45c3715c65ef03896895ae146fc6a24084e8eb62c3dc9a020ac3f7f132eb5556f001b91ab9fec4ea6476b9028474a0e057c2f21850097a54182699f22591c647b20099675008bcb5ad9ccb978ae772445b2952a85d5fbb920eb4635c9bb9117a91297c2982b03d3f0173fbc3bf32a22a3686d7d955d821746046105739c38929c9b58e1beeb0a3c5217e76f2c80eda1ec3f4336f1564329cd4b2bfd9089527e937d7ac2f87bf1b32c51df5dbb4b63a9662ae52d11ee99e1fd14756436e6936dc8a49c762de855c8288c8ba5620f5e52caf9cf1855df1259ff1ace5553407e7aff8a39f74c47a84303cf2f85a67e0e"]}]}, 0xec4}}, 0x0) 12:36:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 12:36:08 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}}, 0xffff9de1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0) 12:36:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0x85, 0x0) 12:36:08 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x5460, 0x0) 12:36:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 12:36:09 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vim2m\x00', 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') 12:36:09 executing program 1: bpf$BPF_GET_BTF_INFO(0x3, 0x0, 0x0) 12:36:09 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:09 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:09 executing program 0: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) 12:36:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 12:36:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x3b8, 0x1a8, 0xffffffff, 0x0, 0x2c8, 0x4f0, 0x4f0, 0xffffffff, 0x4f0, 0x4f0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x26, 0x7a}}, @common=@srh1={{0x90, 'srh\x00'}, {0x32, 0x0, 0x0, 0xad, 0x2, @dev={0xfe, 0x80, [], 0x20}, @dev={0xfe, 0x80, [], 0x17}, @loopback, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff, 0xff], 0x1000, 0x2104}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x16, @ipv6=@local, @ipv4=@multicast1, @port=0x4e21, @gre_key=0x4}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d6, 0x4d4], 0x5, 0x0, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@empty, @gre_key, @gre_key=0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x14, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@loopback, @gre_key=0x3, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1, @ipv4=@private, @port=0x4e20, @gre_key=0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x200400d5}, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') r1 = socket(0x23, 0x4, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x0, 0x218, 0xffffffff, 0x218, 0x100, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, &(0x7f00000009c0), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x2d}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'wg1\x00', {}, {0xff}, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x3}}}, {{@ipv6={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}, @dev, [0x0, 0x0, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xff], 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x6, 0x0, 0x0, 0x31}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@private=0xa010102, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, [], 0x1}, @ipv4=@multicast2, @gre_key, @icmp_id=0x66}}}, {{@ipv6={@mcast2, @mcast1, [0xff], [], 'veth1_vlan\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x5, 0x61}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x6], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@local, @ipv6=@private2, @icmp_id=0x67, @icmp_id=0x68}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x20040094) syz_genetlink_get_family_id$l2tp(0x0) 12:36:10 executing program 3: syz_mount_image$exfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000007bc0)=[{&(0x7f0000006840)="ae", 0x1}, {&(0x7f0000006880)='h', 0x1}, {&(0x7f00000069c0)='g', 0x1}], 0x0, 0x0) 12:36:10 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:10 executing program 0: waitid(0x2, 0xffffffffffffffff, &(0x7f0000000000), 0x61000008, 0x0) 12:36:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:36:11 executing program 5: exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:11 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f00000001c0)) 12:36:11 executing program 3: syz_mount_image$exfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000007bc0)=[{&(0x7f00000068c0)='&', 0x1, 0x10000}, {&(0x7f0000006b40)="99", 0x1, 0x101}], 0x0, 0x0) 12:36:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00c4"], 0x1c}}, 0x0) 12:36:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 12:36:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:36:11 executing program 5: exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, 0x0}, 0x0) 12:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 12:36:12 executing program 0: mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:36:12 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x79) 12:36:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}}}, 0x48) 12:36:12 executing program 5: exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:12 executing program 1: syz_mount_image$exfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000007bc0)=[{&(0x7f0000006b40)="99", 0x1, 0x101}], 0x0, 0x0) 12:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 12:36:12 executing program 0: pipe(&(0x7f00000008c0)) getresuid(&(0x7f0000000900), 0x0, 0x0) 12:36:12 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 12:36:13 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'netpci0\x00', @ifru_map}) 12:36:13 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:13 executing program 1: pidfd_open(0x0, 0x0) 12:36:13 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x10000, 0x0) 12:36:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:36:13 executing program 3: bpf$BPF_GET_BTF_INFO(0xa, 0x0, 0x0) 12:36:14 executing program 1: syz_mount_image$exfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000007bc0)=[{&(0x7f00000068c0)='&', 0x1, 0x10000}, {&(0x7f0000006b40)="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", 0xeff, 0x101}], 0x0, 0x0) 12:36:14 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 12:36:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:36:14 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {0x0}], 0x2, &(0x7f0000001ec0)=ANY=[], 0xf8}, 0x0) 12:36:14 executing program 3: bpf$BPF_GET_BTF_INFO(0x19, 0x0, 0x0) 12:36:15 executing program 1: pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 12:36:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12:36:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 12:36:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 12:36:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee01, r0) 12:36:15 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:15 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x0, 0x0}) 12:36:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000017c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) 12:36:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:36:15 executing program 3: bpf$MAP_CREATE(0x78, 0x0, 0x0) 12:36:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 12:36:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:16 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 12:36:16 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000600)={0x7ff, 0x0, 0x0, 'queue1\x00'}) 12:36:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:36:16 executing program 3: socket(0x1e, 0x0, 0xde6) 12:36:16 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 12:36:17 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) 12:36:17 executing program 3: syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x42) 12:36:17 executing program 2: bpf$BPF_GET_BTF_INFO(0xb, 0x0, 0x0) 12:36:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:36:17 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) 12:36:17 executing program 1: bpf$BPF_GET_BTF_INFO(0x1a, 0x0, 0x0) 12:36:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/kvm\x00', 0x9dca3284548d805e, 0x0) 12:36:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 12:36:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 12:36:18 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x5, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x0, 0x1, 0x1, "6283"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x80, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x0, 0x40, 0x8, 'hj'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x0, "a195"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9c, 0x2, 0x0, 0x0, '8t+'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "f7c8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x3, 0x0, {0x7, 0x25, 0x1, 0x0, 0x40}}}}}}}]}}, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) 12:36:18 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:18 executing program 1: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000002480), 0x0, 0x0) 12:36:18 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0xfe, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0x7ab, "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"}]}, 0x800) 12:36:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000cc0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 12:36:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) [ 1292.553005][ T8465] usb 1-1: new high-speed USB device number 10 using dummy_hcd 12:36:19 executing program 1: socketpair(0xa, 0x0, 0x0, &(0x7f0000000380)) [ 1292.792908][ T8465] usb 1-1: Using ep0 maxpacket: 32 12:36:19 executing program 3: clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1}, 0x58) pipe(&(0x7f00000008c0)) [ 1292.924197][ T8465] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1292.933164][ T8465] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1292.943542][ T8465] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 12:36:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:19 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 12:36:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) [ 1293.175934][ T8465] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1293.185383][ T8465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.193670][ T8465] usb 1-1: Product: syz [ 1293.197948][ T8465] usb 1-1: Manufacturer: syz [ 1293.203904][ T8465] usb 1-1: SerialNumber: syz 12:36:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1293.665333][ T8465] usb 1-1: 0:2 : does not exist [ 1293.835383][ T8465] usb 1-1: USB disconnect, device number 10 [ 1294.432549][ T8465] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1294.612798][ T8461] Bluetooth: hci0: command 0x0406 tx timeout [ 1294.684646][ T8465] usb 1-1: Using ep0 maxpacket: 32 [ 1294.807820][ T8465] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1294.816975][ T8465] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1294.827582][ T8465] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.082908][ T8465] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1295.092354][ T8465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.100456][ T8465] usb 1-1: Product: syz [ 1295.104858][ T8465] usb 1-1: Manufacturer: syz [ 1295.109548][ T8465] usb 1-1: SerialNumber: syz 12:36:21 executing program 0: waitid(0x0, 0xffffffffffffffff, 0x0, 0x61000008, 0x0) 12:36:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}}, 0x0) 12:36:21 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:36:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={0x0}}, 0x0) 12:36:21 executing program 3: syz_mount_image$exfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000007bc0)=[{&(0x7f0000006b40)="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", 0xeff, 0x101}], 0x0, 0x0) [ 1295.346698][ T8465] usb 1-1: can't set config #1, error -71 [ 1295.400339][ T8465] usb 1-1: USB disconnect, device number 11 12:36:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}}, 0x0) 12:36:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:22 executing program 3: waitid(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)) 12:36:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) 12:36:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_setup(0x101, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 12:36:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}}, 0x0) 12:36:23 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, 0x0, &(0x7f0000000100)={0x77359400}) 12:36:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @remote}, 0xf) 12:36:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) 12:36:23 executing program 0: syslog(0x2, &(0x7f0000000600)=""/194, 0xc2) 12:36:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, 0x0, 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12:36:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 12:36:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, 0x0, 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) 12:36:23 executing program 2: socket(0x18, 0x0, 0x7) 12:36:24 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 12:36:24 executing program 3: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000240), 0xffffffffffffff21) 12:36:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, 0x0, 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001600)=ANY=[@ANYBLOB="14000000a411f9"], 0x14}}, 0x0) 12:36:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 12:36:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @l2={0x1f, 0x0, @none}, @can, @nfc={0x27, 0x0, 0x0, 0x2}}) 12:36:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000064c0)={'syztnl0\x00', 0x0}) 12:36:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:25 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0xb4, &(0x7f0000000440)=@string={0xb4, 0x3, "d8c1d85bbbafb3f98c61184dd1b7069c3db00eab0aa2fb95eeffdf7756bbb204e887a70f3f741260c53e2678d41da027cdc1c7daaefa26d81901a5e4b27f352a5ad519d58a0a6573d2a632f067122f2e64e8575cabed6b04833437a45bc89cf5bd16b045691330418d8c5ba8819a3b1c05086bf863165114ad67e25af663a85988d3c1214105611f7bcabe3ee72fb11f4b780e39e1bba04aeea89b7f707cb78cdd6c5f065909d6fc01f31c8fa147168444d9"}}]}) 12:36:25 executing program 4: mq_open(&(0x7f0000000000)='\xb0\x18\xf8#', 0x0, 0x0, 0x0) 12:36:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 12:36:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:25 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xbc}}]}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@generic={0x3}, @generic={0xa, 0x10, 0x3, "1ebd513c73a35f"}]}, 0x4, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, "7f18"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "6e3a468e8f3e12446408989001a7c6f5591c7a22b5b9e122836f9d9c285c8993d602cdf2f0a8bc0e01a81d6526c709860beae4803ea05a542204680a72f2d2f27504847ecf98166bdf264ae30417dd2ea8988bbe0c5a0df09d76a17e7072d780737eedef1061eb6e80e3e0255017d41fbd6b922a46d7f06cb38c7e19f44ba7eb0bacf339e4d2547be8fd0f6533716d30437c3eb528cea3e7bd5d60b70ef81d3de6f329e153e7a7c880e8ecbe70aecff5cd0c58afdfcdf689fcdd"}}, {0x38, &(0x7f0000000440)=@string={0x38, 0x3, "d8c1d85bbbafb3f98c61184dd1b7069c3db00eab0aa2fb95eeffdf7756bbb204e887a70f3f741260c53e2678d41da027cdc1c7daaefa"}}, {0x0, 0x0}]}) 12:36:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1299.433441][ T8465] usb 3-1: new high-speed USB device number 17 using dummy_hcd 12:36:26 executing program 0: socket(0x1e, 0x0, 0x1) 12:36:26 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, 0x20) [ 1299.612057][ T8713] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1299.681783][ T8465] usb 3-1: Using ep0 maxpacket: 32 12:36:26 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) [ 1299.823103][ T8465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1299.856945][ T8713] usb 4-1: Using ep0 maxpacket: 32 [ 1299.877518][ T8465] usb 3-1: language id specifier not provided by device, defaulting to English [ 1300.025850][ T8465] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1300.035284][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.043675][ T8465] usb 3-1: Product: syz [ 1300.048016][ T8465] usb 3-1: Manufacturer: 쇘寘꾻靈憌䴘럑鰆뀽ꬎꈊ闻￮矟뭖Ҳ蟨ྦྷ琿怒㻅砦ᷔ➠쇍类ę羲⨵핚픙ઊ獥ꛒቧⸯ屗ѫ㒃ꐷ졛ᚽ䖰፩䄰貍ꡛ骁᰻ࠅᙣᑑ枭嫢揶妨펈⇁Ձὡ쩻㺾⿧ᾱ硋㤎믡䪠꣮羛籰買泝ٟख़ﳖ輜䞡萖 [ 1300.062517][ T8713] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.075817][ T8465] usb 3-1: SerialNumber: syz [ 1300.086525][ T8713] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.100515][ T8713] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 188, changing to 11 [ 1300.111794][ T8713] usb 4-1: config 1 interface 0 has no altsetting 0 12:36:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @remote}, 0x20) [ 1300.471448][ T8465] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1300.662977][ T8713] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1300.670244][ T8465] usb 3-1: USB disconnect, device number 17 [ 1300.672371][ T8713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.672452][ T8713] usb 4-1: Product: 쇘寘꾻靈憌䴘럑鰆뀽ꬎꈊ闻￮矟뭖Ҳ蟨ྦྷ琿怒㻅砦ᷔ➠쇍类 [ 1300.672577][ T8713] usb 4-1: Manufacturer: 㩮蹆㺏䐒ࡤ邘꜁᱙≺릵⋡澃鲝尨鎉˖꣰ຼꠁ攝윦蘉胤ꀾ呚Т੨ѵ纄飏欖⛟ᜄ⻝風뺋娌皝纡牰胗繳愐滫◠ᝐ῔殽⪒흆泰貳᥾䯴갋㧳틤答﷨攏焳ね籃딾츨嶽띠㴝좧뻬깰್꽘췟觶 [ 1300.984776][ T8713] usbhid 4-1:1.0: can't add hid device: -22 [ 1300.991344][ T8713] usbhid: probe of 4-1:1.0 failed with error -22 [ 1301.036610][ T8713] usb 4-1: USB disconnect, device number 14 [ 1301.472223][ T8465] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1301.781158][ T8465] usb 3-1: Using ep0 maxpacket: 32 [ 1301.811330][ T8714] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1301.904405][ T8465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1301.962747][ T8465] usb 3-1: language id specifier not provided by device, defaulting to English [ 1302.051203][ T8714] usb 4-1: Using ep0 maxpacket: 32 [ 1302.102139][ T8465] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1302.112514][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.120601][ T8465] usb 3-1: Product: syz [ 1302.125353][ T8465] usb 3-1: Manufacturer: 쇘寘꾻靈憌䴘럑鰆뀽ꬎꈊ闻￮矟뭖Ҳ蟨ྦྷ琿怒㻅砦ᷔ➠쇍类ę羲⨵핚픙ઊ獥ꛒቧⸯ屗ѫ㒃ꐷ졛ᚽ䖰፩䄰貍ꡛ骁᰻ࠅᙣᑑ枭嫢揶妨펈⇁Ձὡ쩻㺾⿧ᾱ硋㤎믡䪠꣮羛籰買泝ٟख़ﳖ輜䞡萖 [ 1302.152009][ T8465] usb 3-1: SerialNumber: syz 12:36:28 executing program 2: r0 = mq_open(&(0x7f00000000c0)='@\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000140)="5910be0b", 0x4, 0x0, 0x0) 12:36:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:28 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240), 0x4) [ 1302.272683][ T8714] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.284135][ T8714] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.294666][ T8714] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 188, changing to 11 [ 1302.305927][ T8714] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1302.403147][ T8465] usb 3-1: can't set config #1, error -71 [ 1302.481443][ T8465] usb 3-1: USB disconnect, device number 18 12:36:29 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x1f}, 0x0, 0x0) 12:36:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) 12:36:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f45"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:29 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) [ 1302.742334][ T8714] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1302.751801][ T8714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:36:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0}}, 0x0) [ 1302.862165][ T8714] usb 4-1: can't set config #1, error -71 12:36:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f45"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x7]}, 0x6}, 0x20) [ 1302.945064][ T8714] usb 4-1: USB disconnect, device number 15 12:36:29 executing program 0: r0 = mq_open(&(0x7f00000000c0)='@\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 12:36:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f45"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:30 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:30 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000001580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000014c0)=0xfffffffffffffe3f) 12:36:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0x2, 0x0, 0xe0000000, @remote}, 0x20) 12:36:30 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) 12:36:30 executing program 4: mq_open(&(0x7f0000000000)='\xb0\x18\xf8#', 0x40, 0x0, 0x0) 12:36:30 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:31 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x20) 12:36:31 executing program 2: socket(0x1d, 0x0, 0xfffffffe) 12:36:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) 12:36:31 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x4ba083, 0x0) 12:36:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:31 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000006340)={'gre0\x00', &(0x7f0000006240)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) 12:36:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:31 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) 12:36:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 12:36:32 executing program 3: io_setup(0x3f, &(0x7f0000000040)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, 0x0, 0x0, 0x3, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:36:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x600}, 0x20) 12:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={0x0, 0x40}}, 0x0) 12:36:32 executing program 0: mq_open(&(0x7f0000000040)='ethtool\x00', 0x40, 0x0, &(0x7f0000000080)={0x4, 0x400, 0xc23}) 12:36:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 12:36:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, 0x0, 0x0) 12:36:32 executing program 3: io_setup(0x3f, &(0x7f0000000040)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x2, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x7fff, r1, 0x0, 0x0, 0x3, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:36:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:36:33 executing program 2: syslog(0x3, &(0x7f0000000100)=""/221, 0xdd) 12:36:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x38) 12:36:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 12:36:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, 0x0, 0x0, 0x0, 0x1100) 12:36:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, 0x0, 0x0) 12:36:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x17) 12:36:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) 12:36:34 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, 0x0, 0x0, 0x0, 0x1100) 12:36:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 12:36:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 12:36:35 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, 0x0, 0x0, 0x0, 0x1100) 12:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 12:36:35 executing program 2: mq_open(&(0x7f0000000040)='ethtool\x00', 0x3761f68d624efe76, 0x0, 0x0) 12:36:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, 0x0, 0x0) 12:36:35 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 12:36:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}}, 0x20) 12:36:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x20) 12:36:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d80)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r1}, 0x14}}, 0x0) 12:36:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 12:36:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20) 12:36:36 executing program 4: mq_open(&(0x7f0000000040)='s\x87\x00`\xab]=<\x9f@e\x97\x8a\r\x8e-\t\xecS,\xcd\x00\x00', 0x0, 0x0, 0x0) 12:36:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x6}, 0x20) 12:36:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 12:36:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10]}, 0x6}, 0x20) 12:36:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x20) 12:36:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 12:36:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20) 12:36:37 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f0000000380)=@string={0x2}}]}) 12:36:37 executing program 4: io_setup(0x9, &(0x7f00000001c0)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 12:36:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 12:36:37 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r0, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x97}}}, 0x24}}, 0x0) 12:36:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x14}, 0x14}}, 0x0) 12:36:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20) 12:36:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) [ 1311.279562][ T8465] usb 4-1: new high-speed USB device number 16 using dummy_hcd 12:36:37 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x40, 0xad, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x7, 0x61, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0x9ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x81, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xbc, 0x6, 0x97}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x0, 0x72, 0x1, 0x40, 0x7}, 0x105, &(0x7f0000000140)={0x5, 0xf, 0x105, 0x2, [@generic={0x5e, 0x10, 0x1, "fc81f7e23e89886ec7ff190971f86eea40d3190785bb8c4fa410f4a516575157027751ce7d85c80b39d9d02136ecb334d547111f23a4d33771d8b8f004dfb59b5d604f322706d811d3d24bd9ff0141675d5855c3bcb3a217b352f3"}, @generic={0xa2, 0x10, 0x3, "1ebd513c73a35f06cd5af36deeb566cc4d3b1dbce4aa13c4b9334818c7948d353c8e7a0ef77a5909f2ecefb186b828bf7efca2ed1bcccbae6b7a120c580aab56755f41c3ffedc82f61d9b1b3bde922645edbc571f0d29bc3389a4df7215728eef07a88ac69d839e4fe13bf7c7495f59623616bf158e0b1d8fe82927f4cb5375d85227f20769b3a7f253f2d788598355c3cd1b2d73dbc592699b375ff3db66e"}]}, 0x7, [{0xf3, &(0x7f0000000280)=@string={0xf3, 0x3, "7f1800c8a6126d59ca7901d7718d061454bcd01eedb9e944d84a28f5eaa7e8dcd7f6bb0289eebbd9333a3218e4b79db8bf9e11503a47a685abcea3836becfd4a00b79c865072826cf82e2262e5121be10b46a6dcb0d32bbf113f5234df64e86e254f354f9ab3a97be71554cfb2dcc43595113b807d0fa6f7a309abff1486eb88ff1df43d874a96c89221bfa0f06e15197296afcdb366afff5a1c1043e6e4296ed57ac88cb9a898e2c291f6a84fed75edcbe9aba8cfc259453e54bf78321a356491017ebbd0bf1281093783e5b747ac1fcb2bb4371b3a0eb1ef7c29362ce5d8180413ba174e7c0e29339406320ea7452738"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "6e3a468e8f3e12446408989001a7c6f5591c7a22b5b9e122836f9d9c285c8993d602cdf2f0a8bc0e01a81d6526c709860beae4803ea05a542204680a72f2d2f27504847ecf98166bdf264ae30417dd2ea8988bbe0c5a0df09d76a17e7072d780737eedef1061eb6e80e3e0255017d41fbd6b922a46d7f06cb38c7e19f44ba7eb0bacf339e4d2547be8fd0f6533716d30437c3eb528cea3e7bd5d60b70ef81d3de6f329e153e7a7c880e8ecbe70aecff5cd0c58afdfcdf689fcdd"}}, {0xce, &(0x7f0000000440)=@string={0xce, 0x3, "d8c1d85bbbafb3f98c61184dd1b7069c3db00eab0aa2fb95eeffdf7756bbb204e887a70f3f741260c53e2678d41da027cdc1c7daaefa26d81901a5e4b27f352a5ad519d58a0a6573d2a632f067122f2e64e8575cabed6b04833437a45bc89cf5bd16b045691330418d8c5ba8819a3b1c05086bf863165114ad67e25af663a85988d3c1214105611f7bcabe3ee72fb11f4b780e39e1bba04aeea89b7f707cb78cdd6c5f065909d6fc01f31c8fa147168444d93ef8eec782eef282d4a0b1433ed1bd6396b5bb1f317fd9488b83"}}, {0x28, &(0x7f0000000080)=@string={0x28, 0x3, "c53fe62551c989f233a89b20b56db813b6ef4ae13894bba031bd15fc3e5e6b9fa9de214b4339"}}, {0xb9, &(0x7f0000000540)=@string={0xb9, 0x3, "929b2181fab4de4caae4be32dff7212df618c8e77b54a9eeaf8a6290bec2f62a88513416423454185709b6818176fefd6b9442fd9ab11ac8cee0648175dfb1bd28a2d106d6cc1be3ebf1e00b0288d71fad3f38dec23d98abcb325953e9c0711c9c10e2f288aa27ac1c231f8639e8c6382216995b073f20e8c94fca77eead57875db9b6762ab6f8e821994236edc66bf6150db22568b207562874140865a3026f9364e0db8e86bf9cc920cde5aff6402c811842ace6f9e7"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3001}}]}) 12:36:38 executing program 2: mq_open(&(0x7f0000000040)='.thtool\x00', 0x0, 0x0, 0x0) [ 1311.531871][ T8465] usb 4-1: Using ep0 maxpacket: 32 12:36:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x4, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) 12:36:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) [ 1311.659900][ T8465] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1311.720577][ T8465] usb 4-1: language id specifier not provided by device, defaulting to English 12:36:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) [ 1311.863785][ T8465] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1311.873345][ T8465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.881625][ T8465] usb 4-1: Product: syz [ 1311.885883][ T8465] usb 4-1: SerialNumber: syz [ 1311.960084][T23458] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1311.979448][ T8465] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1312.178779][ T8465] usb 4-1: USB disconnect, device number 16 [ 1312.200566][T23458] usb 5-1: Using ep0 maxpacket: 32 [ 1312.400952][T23458] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.412089][T23458] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 188, changing to 11 [ 1312.423409][T23458] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1312.670871][T23458] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1312.680165][T23458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.688513][T23458] usb 5-1: Product: 쇘寘꾻靈憌䴘럑鰆뀽ꬎꈊ闻￮矟뭖Ҳ蟨ྦྷ琿怒㻅砦ᷔ➠쇍类ę羲⨵핚픙ઊ獥ꛒቧⸯ屗ѫ㒃ꐷ졛ᚽ䖰፩䄰貍ꡛ骁᰻ࠅᙣᑑ枭嫢揶妨펈⇁Ձὡ쩻㺾⿧ᾱ硋㤎믡䪠꣮羛籰買泝ٟख़ﳖ輜䞡萖쟮苲ꃔ䎱턾掽떖Ά缱䣙莋 [ 1312.718176][T23458] usb 5-1: Manufacturer: 㩮蹆㺏䐒ࡤ邘꜁᱙≺릵⋡澃鲝尨鎉˖꣰ຼꠁ攝윦蘉胤ꀾ呚Т੨ѵ纄飏欖⛟ᜄ⻝風뺋娌皝纡牰胗繳愐滫◠ᝐ῔殽⪒흆泰貳᥾䯴갋㧳틤答﷨攏焳ね籃딾츨嶽띠㴝좧뻬깰್꽘췟觶 [ 1312.746610][T23458] usb 5-1: SerialNumber: 㿅◦쥑꠳ₛ涵Ꮈ鐸ꂻ봱ﰕ帾齫䬡㥃 [ 1312.950220][ T8465] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1313.229912][ T8465] usb 4-1: Using ep0 maxpacket: 32 [ 1313.320143][T23458] usbhid 5-1:1.0: can't add hid device: -71 [ 1313.326580][T23458] usbhid: probe of 5-1:1.0 failed with error -71 [ 1313.360905][ T8465] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1313.375161][T23458] usb 5-1: USB disconnect, device number 6 [ 1313.418136][ T8465] usb 4-1: language id specifier not provided by device, defaulting to English [ 1313.569577][ T8465] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1313.580213][ T8465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.588312][ T8465] usb 4-1: Product: syz [ 1313.593130][ T8465] usb 4-1: SerialNumber: syz [ 1313.737115][ T8465] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 12:36:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) 12:36:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) 12:36:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 12:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x6f) 12:36:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 12:36:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x20) getsockname(r0, 0x0, &(0x7f0000001740)) [ 1313.943016][ T8714] usb 4-1: USB disconnect, device number 17 12:36:41 executing program 1: io_setup(0x9, &(0x7f00000001c0)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xbb1b, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:36:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "23176b", "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"}}, 0x110) 12:36:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000006340)={'gre0\x00', &(0x7f0000006240)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) 12:36:41 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x0, 0x0}, {0xb4, &(0x7f0000000440)=@string={0xb4, 0x3, "d8c1d85bbbafb3f98c61184dd1b7069c3db00eab0aa2fb95eeffdf7756bbb204e887a70f3f741260c53e2678d41da027cdc1c7daaefa26d81901a5e4b27f352a5ad519d58a0a6573d2a632f067122f2e64e8575cabed6b04833437a45bc89cf5bd16b045691330418d8c5ba8819a3b1c05086bf863165114ad67e25af663a85988d3c1214105611f7bcabe3ee72fb11f4b780e39e1bba04aeea89b7f707cb78cdd6c5f065909d6fc01f31c8fa147168444d9"}}, {0x0, 0x0}]}) 12:36:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 12:36:41 executing program 3: io_setup(0x3, &(0x7f0000000240)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x1, &(0x7f0000001380)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000280)="408db3caa5600ae75a", 0x9}]) 12:36:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ac0)={0x0}}, 0x0) 12:36:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000006340)={'gre0\x00', &(0x7f0000006240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) 12:36:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000001100)="9a") 12:36:41 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) [ 1315.199224][ T8465] usb 5-1: new high-speed USB device number 7 using dummy_hcd 12:36:41 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1315.449139][ T8465] usb 5-1: Using ep0 maxpacket: 32 [ 1315.570937][ T8465] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1315.678739][ T8465] usb 5-1: language id specifier not provided by device, defaulting to English 12:36:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x20) 12:36:42 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r0, 0x0, &(0x7f0000000600)) 12:36:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffe}, 0x20) 12:36:42 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) [ 1316.030062][T23775] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1316.280031][ T8465] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1316.289480][ T8465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.297634][ T8465] usb 5-1: Product: 쇘寘꾻靈憌䴘럑鰆뀽ꬎꈊ闻￮矟뭖Ҳ蟨ྦྷ琿怒㻅砦ᷔ➠쇍类ę羲⨵핚픙ઊ獥ꛒቧⸯ屗ѫ㒃ꐷ졛ᚽ䖰፩䄰貍ꡛ骁᰻ࠅᙣᑑ枭嫢揶妨펈⇁Ձὡ쩻㺾⿧ᾱ硋㤎믡䪠꣮羛籰買泝ٟख़ﳖ輜䞡萖 [ 1316.325234][T23775] usb 4-1: Using ep0 maxpacket: 32 [ 1316.459304][T23775] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1316.472338][T23775] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1316.556371][ T8465] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1316.658913][T23775] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1316.668279][T23775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.676577][T23775] usb 4-1: Product: syz [ 1316.680990][T23775] usb 4-1: Manufacturer: syz [ 1316.685694][T23775] usb 4-1: SerialNumber: syz [ 1316.756541][ T9591] usb 5-1: USB disconnect, device number 7 [ 1316.806350][T23775] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1317.019571][ T9591] usb 4-1: USB disconnect, device number 18 [ 1317.539090][ T9591] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1317.798692][ T9591] usb 5-1: Using ep0 maxpacket: 32 [ 1317.802031][ T8714] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1317.928521][ T9591] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1317.980488][ T9591] usb 5-1: language id specifier not provided by device, defaulting to English [ 1318.048289][ T8714] usb 4-1: Using ep0 maxpacket: 32 12:36:44 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0xaa002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000280)=0x1000) write$binfmt_elf32(r0, 0x0, 0x20000318) 12:36:44 executing program 5: select(0x40, &(0x7f00000002c0)={0x5}, 0x0, 0x0, 0x0) 12:36:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) 12:36:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x100800) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 12:36:44 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) [ 1318.170747][ T8714] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1318.174457][ T9591] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1318.185740][ T8714] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1318.194598][ T9591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.194728][ T9591] usb 5-1: Product: 쇘寘꾻靈憌䴘럑鰆뀽ꬎꈊ闻￮矟뭖Ҳ蟨ྦྷ琿怒㻅砦ᷔ➠쇍类ę羲⨵핚픙ઊ獥ꛒቧⸯ屗ѫ㒃ꐷ졛ᚽ䖰፩䄰貍ꡛ骁᰻ࠅᙣᑑ枭嫢揶妨펈⇁Ձὡ쩻㺾⿧ᾱ硋㤎믡䪠꣮羛籰買泝ٟख़ﳖ輜䞡萖 12:36:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa2c65) [ 1318.498611][ T8714] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 1318.508769][ T8714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.516856][ T8714] usb 4-1: Product: syz [ 1318.521564][ T8714] usb 4-1: Manufacturer: syz [ 1318.526330][ T8714] usb 4-1: SerialNumber: syz 12:36:45 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x38040, 0x0) [ 1318.585841][ T9591] usb 5-1: can't set config #1, error -71 [ 1318.688230][ T9591] usb 5-1: USB disconnect, device number 8 12:36:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x200000e0) 12:36:45 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000001240)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "7f72f7385c3b85875e9e212d0055d6c75bb5218e0224624d9bf2e17773ab3f34a5214469ffd029c6f50bac74e97054abecec8848a43a3516fb435cafb98848"}, 0x60, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x1010}], 0x1, 0x0) 12:36:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) [ 1318.878593][ T8714] usb 4-1: can't set config #1, error -71 [ 1318.905097][ T8714] usb 4-1: USB disconnect, device number 19 12:36:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 12:36:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}]}}}]}, 0x3c}}, 0x0) 12:36:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:36:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 12:36:46 executing program 1: r0 = epoll_create(0x5) r1 = epoll_create(0x2209) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x5d2a5bc020f6c9fb}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 12:36:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfd}}, r1}}, 0x48) 12:36:46 executing program 5: socketpair(0x23, 0x0, 0x0, 0x0) 12:36:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:36:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 12:36:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 12:36:46 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) 12:36:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:36:47 executing program 4: r0 = socket(0x28, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12:36:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffe9e, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x10002103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0, 0x0) 12:36:47 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 12:36:47 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) 12:36:47 executing program 1: shmget(0x3, 0x3000, 0xcca39965dc98a730, &(0x7f0000ffb000/0x3000)=nil) 12:36:47 executing program 4: pipe2(&(0x7f0000000040), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) pselect6(0x40, &(0x7f0000000180)={0x3}, 0x0, &(0x7f0000000200)={0x9}, &(0x7f0000000280)={r0}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x5]}, 0x8}) 12:36:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:36:47 executing program 5: syz_emit_ethernet(0xb2, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x18, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0xd, "8003f7cd9c69929187c0c1"}, {0x0, 0x2}, {0x0, 0xb, "24ab05943d14cd7cc8"}, {0x0, 0x8, "b5e2c1171eb0"}, {0x0, 0x11, "4ef353316998178ca547f68ad25610"}, {0x0, 0x9, "175f4d4206e9e8"}, {0x0, 0x7, "c11cc1294a"}]}]}}}}}}, 0x0) 12:36:48 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 12:36:48 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 12:36:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000640)="1e", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)='R', 0x1}], 0x1}}], 0x2, 0x0) 12:36:48 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 12:36:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:36:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000025c0)) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) r1 = dup(r0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9db0, 0x400}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000071"], 0x0) 12:36:48 executing program 4: socket(0x23, 0x2, 0x1) 12:36:49 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 12:36:49 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5}) 12:36:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) [ 1323.040045][T26978] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:36:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000640)="1e", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)='R', 0x1}], 0x1}}], 0x2, 0x0) 12:36:49 executing program 4: syz_open_dev$vcsn(0x0, 0x0, 0x3) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000100), 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) 12:36:49 executing program 3: r0 = socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x811) 12:36:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in6=@private0, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, @etimer_thresh={0x8}]}, 0xa8}}, 0x0) 12:36:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 12:36:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 12:36:50 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$midi(r0, &(0x7f0000000180)=""/107, 0x6b) 12:36:50 executing program 3: syz_emit_ethernet(0xa6, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xd, "8003f7cd9c69929187c0c1"}, {0x0, 0xa, "a6355030995db252"}, {0x0, 0xb, "24ab05943d14cd7cc8"}, {0x0, 0x8, "b5e2c1171eb0"}, {0x0, 0x9, "4ef35331699817"}, {0x0, 0x4, "c11c"}]}]}}}}}}, 0x0) 12:36:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 12:36:50 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid_for_children\x00') setns(r0, 0x20000000) 12:36:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in6=@private0, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, @etimer_thresh={0x8}]}, 0xa8}}, 0x0) 12:36:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:36:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000640)="1e", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)='R', 0x1}], 0x1}}], 0x2, 0x0) 12:36:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="0d00f1ff0100ffff10000a000800010062706600c0160200bc160100a80000000b00010073616d706c6500000c0002800800050004000000710006006aa64f2ede733673d63f915e7592a9ebf3307ec52486b9cd206857221e32f1a6c68cd7114c55c128001db27f692f4810d0d833ac2cb8a20bb373c9b872887e77adc109b6b16bbc70df37c9338ee67c04"], 0x16ec}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 12:36:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 12:36:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x34) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:36:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in6=@private0, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, @etimer_thresh={0x8}]}, 0xa8}}, 0x0) 12:36:51 executing program 3: mkdir(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000071"], 0x0) 12:36:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 12:36:52 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x4a701) write$midi(r0, &(0x7f0000000180)='[', 0x1) 12:36:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in6=@private0, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, @etimer_thresh={0x8}]}, 0xa8}}, 0x0) [ 1325.703873][T27039] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:36:52 executing program 4: r0 = socket(0x23, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 12:36:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 12:36:52 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x103002) write$midi(r0, &(0x7f00000000c0)="20959def212f5fdb8aeb44dd42f60abf2aef5b8c41b89f834a0ba964bb676bbaeae5138ce1357ae090231a5db414eceef99b00ab6e4d5dd1697ed6b7caaaab22e80cabf0de08f6cbc3b86b161beb0b5492702bf54f396f12a1bd21844e83387c5b6ded2b147a5946c3621254c45a40e37afc45c26ba88306060d55d11f02205b2958743203ea1a3400"/150, 0xffffffc4) 12:36:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000640)="1e", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)='R', 0x1}], 0x1}}], 0x2, 0x0) 12:36:52 executing program 3: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0d00f1ff0100ffff10000a000800010062706600c0160200bc160100a80000000b00010073616d706c6500000c0002800800050004"], 0x16ec}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 12:36:52 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '/\x00'}, 0xe) 12:36:53 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeedf, 0x8}) [ 1326.617270][ T32] audit: type=1400 audit(1609418213.176:162): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/" pid=27059 comm="syz-executor.5" 12:36:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 12:36:53 executing program 5: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 12:36:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x0, @local}, @nl, 0xd7}) 12:36:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) 12:36:54 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeedf, 0x8}) 12:36:54 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2f92f285"}}) 12:36:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x0, @local}, @nl, 0xd7}) 12:37:11 executing program 2: socket(0x29, 0x2, 0x40) 12:37:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) 12:37:11 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeedf, 0x8}) 12:37:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000000)={0x0, 0x0, "c9c9017f490bf2a41895bad9e4f0b9009c4880efe72208fb70795c3885711764", 0x7, 0x6, 0xfff, 0x0, 0x20}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0xa000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0xfffeffff, 0x0, [], {0x0, @bt={0x2, 0x1ff, 0x0, 0x3, 0x1, 0x3, 0x1f, 0xef, 0x3, 0x5, 0x7e000000, 0x6, 0x200, 0x5, 0x1e, 0x18, {0x0, 0x1}, 0x59}}}) 12:37:11 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x2, 0xa301) write$midi(r0, 0x0, 0x0) 12:37:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x0, @local}, @nl, 0xd7}) 12:37:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) 12:37:12 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeedf, 0x8}) 12:37:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000600)=0x40000000, 0x4) sendto$inet(r0, &(0x7f00000006c0)='\f&', 0x2, 0x0, 0x0, 0x0) 12:37:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffe9e, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="464451a70e59e6e996338e121e981e2b70733b3c9348590892c746913546ff3ad2d6abfbf11a5a69a1a62678327518055cb274a2c69da558dcee3ef27bee54def72d9a36ded80028eca6a9f7cf301fe5d9720926c22a226976e8cedd21931f8dc31f59309edb262bb1b9f8d5711d063cd9a840e7604a9e3f73373da8bf4c31da3c8640ff21aa163f", 0x88, 0x6aeb}], 0x1088, &(0x7f00000002c0)={[{'$*'}], [{@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '+#'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_type={'obj_type'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{\''}}, {@obj_role={'obj_role', 0x3d, 'stat\x00'}}]}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x10002103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat(r3, &(0x7f0000000440)='./file0/file0\x00', 0xc0000, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0x8}}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 12:37:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x0, @local}, @nl, 0xd7}) 12:37:12 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4008001) 12:37:13 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 12:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev, 0x0, 0xa, 0x6c}}, 0x28}}, 0x0) 12:37:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:37:13 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = inotify_init() fstat(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r2}) 12:37:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac57", 0x6, 0x1f}, {0x0, 0x0, 0x792}], 0x0, &(0x7f0000000180)={[{@fat=@dmask={'dmask'}}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 12:37:13 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x310, 0x2) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000180), 0x0) 12:37:13 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x800, 0x0, {0x3, @raw_data="45f99c8d803c7d18d084e8338e07c74f842097a8a81fded4206039230795d4a3e83e27790281cb056488bc58a41ebf3f33c04b4e3a424d65a33102ef12b66384a29da50dbe5cc4de4be31d4398b7255052f30bac49082a6484de09217af9404b06957dce777b56e3a146cdde9b851d9fc93d0075aa756b870685373dd183ac4efbdbe7e5aaad153ab1346f7f6e39c78dfaa9482b0734e7f03ae5166e0f7c72024901273d575e7946419c0b503370fe3fa042fa94b02d5567c15a24430464cf3ba23971071c818a64"}}) 12:37:13 executing program 5: r0 = socket(0x2, 0x3, 0x6e) getpeername$unix(r0, 0x0, 0x0) [ 1347.400875][T27153] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:37:14 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x2, 0x14b301) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)) 12:37:14 executing program 2: pselect6(0x40, &(0x7f0000000600)={0x4}, &(0x7f0000000640)={0x6}, 0x0, &(0x7f00000006c0), &(0x7f0000000740)={&(0x7f0000000700)={[0xb2]}, 0x8}) 12:37:14 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x5, [], &(0x7f00000000c0)}) 12:37:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000002780)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000780)=0xfffffffffffffffa, &(0x7f0000000cc0), 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x42, 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000e00)=""/81, 0x51}, 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, &(0x7f0000001140)=0x3f8000, 0x7ff, 0x0, 0xa7}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {0x0}, &(0x7f0000002700)=[{0x0}, {&(0x7f00000012c0)=""/8, 0x8}], 0x2}}], 0x140, 0x44000}, 0xc000) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r1, 0x25}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:37:14 executing program 0: r0 = epoll_create(0x10080) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xb0000015}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 12:37:14 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0d00f1ff0100ffff10000a000800010062706600c0160200bc160100a80000000b00010073616d706c6500000c0002800800050004"], 0x16ec}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 12:37:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 12:37:14 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="d0030d000a000200aaaaaaaaaabb0000d5a694ef9f08"], 0x28}}, 0x0) 12:37:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="04080009001c5081694cc271218c08409d54950000ff", 0x16}], 0x0, &(0x7f0000000080)) 12:37:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0xfffd}]}}}]}, 0x3c}}, 0x0) 12:37:15 executing program 4: getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), 0x0) 12:37:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="f3", 0x1}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)='X', 0x1}], 0x1}}], 0x2, 0x0) [ 1349.214892][T27202] FAT-fs (loop3): bogus logical sector size 8561 [ 1349.221539][T27202] FAT-fs (loop3): Can't find a valid FAT filesystem 12:37:15 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000004280)='.log\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) socket(0x18, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x200001, 0x0) pselect6(0x40, &(0x7f0000000080)={0x1dc}, 0x0, 0x0, 0x0, 0x0) 12:37:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x7fff}) 12:37:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000011c0)=0x1000) 12:37:16 executing program 3: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000004280)='.log\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000004280)='.log\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r2, &(0x7f0000004280)='.log\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000001c00)='/dev/radio#\x00', 0x1, 0x2) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0xcdb}, &(0x7f0000000240), 0x0) 12:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005340)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1}}], 0x1, 0x14) 12:37:16 executing program 1: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x6def4b51f40e8fae) 12:37:16 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x7fff}) 12:37:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000011c0)=0x1000) 12:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48050000000000000000000000000000010000030900030073797a31002baeaa6a812514c5b6accb0000000900030073797a300000000005000100070000000900030073797a60c97e32b2"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@private1={0xfc, 0x1, [], 0x1}}, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='='], 0x1, 0x0) msgsnd(0x0, &(0x7f00000005c0)={0x3}, 0x4, 0x0) msgctl$IPC_RMID(0x0, 0x0) 12:37:17 executing program 3: madvise(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xa) 12:37:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death], 0x0, 0x0, 0x0}) 12:37:17 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 12:37:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000011c0)=0x1000) 12:37:17 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x7fff}) 12:37:17 executing program 3: mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x656c0d56b97e1671, 0xffffffffffffffff, 0x0) 12:37:17 executing program 4: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0) 12:37:17 executing program 1: r0 = socket(0x15, 0x5, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 12:37:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000011c0)=0x1000) 12:37:18 executing program 2: r0 = epoll_create(0x10080) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x60000010}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 12:37:18 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x7fff}) 12:37:18 executing program 3: madvise(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x9) 12:37:18 executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x1f}, 0x0, 0x0, 0x0) 12:37:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'g4Q.'}}) 12:37:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{0x0}], 0x0, &(0x7f0000000800)={[{@suiddir='suiddir'}, {@errors_withdraw='errors=withdraw'}, {@hostdata={'hostdata', 0x3d, '\xe4$'}}], [{@audit='audit'}]}) 12:37:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000640)="1e", 0x1}], 0x1}}], 0x1, 0x0) 12:37:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 12:37:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa}]}, 0x20}}, 0x0) [ 1352.489587][T27282] gfs2: Unknown parameter 'audit' 12:37:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'g4Q.'}}) 12:37:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) 12:37:19 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:37:19 executing program 2: sendmsg$rds(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002700)=[{&(0x7f00000012c0)=""/8, 0x8}], 0x1}}], 0x48}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) 12:37:19 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x404c2, 0x0) [ 1353.293262][T27303] bond0: option fail_over_mac: unable to set because the bond device has slaves 12:37:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'g4Q.'}}) 12:37:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2008, &(0x7f0000000280)) 12:37:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x1000, 0x1}) 12:37:20 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000004280)='.log\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000004280)='.log\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/bsg\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0xcdb}, &(0x7f0000000240), 0x0) 12:37:20 executing program 0: r0 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 12:37:20 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0x0, 0x0) 12:37:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'g4Q.'}}) 12:37:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x1000, 0x1}) 12:37:20 executing program 5: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x0, 0x0) 12:37:20 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read$midi(r0, &(0x7f0000000180)=""/107, 0x6b) 12:37:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@'], 0x54}}, 0x20000800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x447fe9, 0x0) 12:37:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 12:37:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x1000, 0x1}) 12:37:21 executing program 1: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 12:37:21 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000025c0)={0x18, 0x8000000000000001}, 0x18) 12:37:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001800)=[{0x0}, {0x0, 0x0, 0x1ff}], 0x8, &(0x7f0000002980)) 12:37:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000140)=0x8) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8001, 0x4}, 0x8) 12:37:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000e00)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x1000, 0x1}) 12:37:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 12:37:22 executing program 1: r0 = socket(0x1e, 0x2, 0x0) getpeername$unix(r0, 0x0, 0x0) 12:37:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffe9e, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="464451a70e59e6e996338e121e981e2b70733b3c9348590892c746913546ff3ad2d6abfbf11a5a69a1a62678327518055cb274a2c69da558dcee3ef27bee54def72d9a36ded80028eca6a9f7cf301fe5d9720926c22a226976e8cedd21931f8dc31f59309edb262bb1b9f8d5711d063cd9a840e7604a9e3f73373da8bf4c31da3c8640ff21aa163f", 0x88}], 0x1088, &(0x7f00000002c0)={[{'$*'}], [{@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '+#'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_type={'obj_type'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{\''}}, {@obj_role={'obj_role', 0x3d, 'stat\x00'}}]}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) clone(0x10002103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat(r3, &(0x7f0000000440)='./file0/file0\x00', 0xc0000, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0x8}}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 12:37:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r1}}, 0x128) 12:37:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001800)=[{0x0}, {0x0, 0x0, 0x1ff}], 0x8, &(0x7f0000002980)) 12:37:23 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xa00000, 0x36, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, [], @p_u32=0x0}}) [ 1356.506046][T27349] not chained 1060000 origins [ 1356.510841][T27349] CPU: 0 PID: 27349 Comm: syz-executor.4 Not tainted 5.10.0-rc4-syzkaller #0 [ 1356.519607][T27349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.529695][T27349] Call Trace: [ 1356.532987][T27349] dump_stack+0x21c/0x280 [ 1356.537316][T27349] kmsan_internal_chain_origin+0x6f/0x130 [ 1356.543023][T27349] ? kmsan_get_metadata+0x116/0x180 [ 1356.548209][T27349] ? kmsan_internal_set_origin+0x85/0xc0 [ 1356.553829][T27349] ? __msan_instrument_asm_store+0x25/0x130 [ 1356.559781][T27349] ? __local_bh_enable_ip+0x97/0x1d0 [ 1356.565062][T27349] ? _raw_spin_unlock_bh+0x4b/0x60 [ 1356.570171][T27349] ? kmsan_get_metadata+0x116/0x180 [ 1356.575360][T27349] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.581170][T27349] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1356.587240][T27349] ? kmsan_get_metadata+0x116/0x180 [ 1356.592432][T27349] ? kmsan_internal_set_origin+0x85/0xc0 [ 1356.598079][T27349] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1356.604154][T27349] ? _copy_from_user+0x1fd/0x300 [ 1356.609079][T27349] ? kmsan_get_metadata+0x116/0x180 [ 1356.614280][T27349] __msan_chain_origin+0x57/0xa0 [ 1356.619222][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1356.624328][T27349] get_compat_msghdr+0x108/0x2b0 [ 1356.629258][T27349] __sys_sendmmsg+0x793/0x1060 [ 1356.634020][T27349] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.639813][T27349] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1356.645933][T27349] ? idle_cpu+0x9a/0x1d0 [ 1356.650168][T27349] ? __irq_exit_rcu+0x7a/0x270 [ 1356.654917][T27349] ? __msan_get_context_state+0x9/0x20 [ 1356.660379][T27349] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 1356.666362][T27349] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1356.672511][T27349] ? kmsan_internal_is_vmalloc_addr+0x30/0x30 [ 1356.678570][T27349] ? kmsan_get_metadata+0x116/0x180 [ 1356.683767][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1356.689142][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1356.694682][T27349] __do_fast_syscall_32+0x102/0x160 [ 1356.699874][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1356.704869][T27349] do_SYSENTER_32+0x73/0x90 [ 1356.709372][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.715686][T27349] RIP: 0023:0xf7f20549 [ 1356.719749][T27349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1356.739348][T27349] RSP: 002b:00000000f551a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1356.747758][T27349] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001540 [ 1356.755720][T27349] RDX: 0000000000000553 RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.763680][T27349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.771651][T27349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1356.779607][T27349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.787564][T27349] Uninit was stored to memory at: [ 1356.792581][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1356.798286][T27349] __msan_chain_origin+0x57/0xa0 [ 1356.803212][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1356.808310][T27349] get_compat_msghdr+0x108/0x2b0 [ 1356.813260][T27349] __sys_sendmmsg+0x793/0x1060 [ 1356.818013][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1356.823376][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1356.828911][T27349] __do_fast_syscall_32+0x102/0x160 [ 1356.834095][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1356.838934][T27349] do_SYSENTER_32+0x73/0x90 [ 1356.843517][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.849826][T27349] [ 1356.852135][T27349] Uninit was stored to memory at: [ 1356.857147][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1356.862852][T27349] __msan_chain_origin+0x57/0xa0 [ 1356.867904][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1356.873011][T27349] get_compat_msghdr+0x108/0x2b0 [ 1356.877947][T27349] __sys_sendmmsg+0x793/0x1060 [ 1356.882706][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1356.888072][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1356.893611][T27349] __do_fast_syscall_32+0x102/0x160 [ 1356.898801][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1356.903650][T27349] do_SYSENTER_32+0x73/0x90 [ 1356.908145][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.914449][T27349] [ 1356.916760][T27349] Uninit was stored to memory at: [ 1356.921776][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1356.927481][T27349] __msan_chain_origin+0x57/0xa0 [ 1356.932416][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1356.937512][T27349] get_compat_msghdr+0x108/0x2b0 [ 1356.942435][T27349] __sys_sendmmsg+0x793/0x1060 [ 1356.947196][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1356.952554][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1356.958101][T27349] __do_fast_syscall_32+0x102/0x160 [ 1356.963304][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1356.968142][T27349] do_SYSENTER_32+0x73/0x90 [ 1356.972634][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1356.978938][T27349] [ 1356.981246][T27349] Uninit was stored to memory at: [ 1356.986260][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1356.991968][T27349] __msan_chain_origin+0x57/0xa0 [ 1356.996890][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1357.001995][T27349] get_compat_msghdr+0x108/0x2b0 [ 1357.006927][T27349] __sys_sendmmsg+0x793/0x1060 [ 1357.011680][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1357.017041][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1357.022585][T27349] __do_fast_syscall_32+0x102/0x160 [ 1357.027769][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1357.032603][T27349] do_SYSENTER_32+0x73/0x90 [ 1357.037095][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.043421][T27349] [ 1357.045727][T27349] Uninit was stored to memory at: [ 1357.050736][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1357.056440][T27349] __msan_chain_origin+0x57/0xa0 [ 1357.061364][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1357.066462][T27349] get_compat_msghdr+0x108/0x2b0 [ 1357.071386][T27349] __sys_sendmmsg+0x793/0x1060 [ 1357.076156][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1357.081515][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1357.087050][T27349] __do_fast_syscall_32+0x102/0x160 [ 1357.092236][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1357.097075][T27349] do_SYSENTER_32+0x73/0x90 [ 1357.101568][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.107866][T27349] [ 1357.110183][T27349] Uninit was stored to memory at: [ 1357.115192][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1357.120899][T27349] __msan_chain_origin+0x57/0xa0 [ 1357.125823][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1357.130925][T27349] get_compat_msghdr+0x108/0x2b0 [ 1357.135846][T27349] __sys_sendmmsg+0x793/0x1060 [ 1357.140595][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1357.145959][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1357.151491][T27349] __do_fast_syscall_32+0x102/0x160 [ 1357.156719][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1357.161560][T27349] do_SYSENTER_32+0x73/0x90 [ 1357.166055][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.172355][T27349] [ 1357.174662][T27349] Uninit was stored to memory at: [ 1357.179686][T27349] kmsan_internal_chain_origin+0xad/0x130 [ 1357.185393][T27349] __msan_chain_origin+0x57/0xa0 [ 1357.190318][T27349] __get_compat_msghdr+0x6db/0x9d0 [ 1357.195415][T27349] get_compat_msghdr+0x108/0x2b0 [ 1357.200339][T27349] __sys_sendmmsg+0x793/0x1060 [ 1357.205089][T27349] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1357.210449][T27349] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1357.215993][T27349] __do_fast_syscall_32+0x102/0x160 [ 1357.221180][T27349] do_fast_syscall_32+0x6a/0xc0 [ 1357.226067][T27349] do_SYSENTER_32+0x73/0x90 [ 1357.230579][T27349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1357.236885][T27349] [ 1357.239204][T27349] Local variable ----msg_sys@__sys_sendmmsg created at: [ 1357.246158][T27349] __sys_sendmmsg+0xbe/0x1060 [ 1357.250821][T27349] __sys_sendmmsg+0xbe/0x1060 12:37:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 12:37:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x241}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:37:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001800)=[{0x0}, {0x0, 0x0, 0x1ff}], 0x8, &(0x7f0000002980)) 12:37:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000400)}], 0x0, &(0x7f0000000a00)={[{@uid={'uid'}}, {@gid={'gid'}}, {@uid={'uid'}}], [{@fowner_eq={'fowner'}}]}) 12:37:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) 12:37:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@dots='dots'}]}) 12:37:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001800)=[{0x0}, {0x0, 0x0, 0x1ff}], 0x8, &(0x7f0000002980)) 12:37:25 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x0, [], 0x0}) 12:37:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:37:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x14) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffe9e, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1358.887311][T27399] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:37:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{}, {}], r1, 0x1, 0x1, 0xc1}}, 0x20) 12:37:25 executing program 1: syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001800)=[{0x0, 0x0, 0x1ff}], 0x0, &(0x7f0000002980)) 12:37:25 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getresgid(&(0x7f0000000a80), 0x0, 0x0) 12:37:26 executing program 4: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x111f90ad, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000300)={0x0, "5658089a26ddacb016f01093ee2ff087a23de2944144dad865096e921c689483"}) 12:37:26 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/78, 0x4e}, {0x0}], 0x2, &(0x7f0000000280)=""/255, 0xff}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 12:37:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 12:37:26 executing program 0: clock_gettime(0x2, &(0x7f0000000300)) 12:37:26 executing program 3: r0 = socket(0x23, 0x5, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 12:37:26 executing program 4: rmdir(&(0x7f0000000180)='./file0\x00') 12:37:26 executing program 1: stat(&(0x7f0000001040)='./file0\x00', 0xfffffffffffffffe) 12:37:26 executing program 2: unlink(&(0x7f0000000000)='./file0\x00') [ 1360.128762][T27440] binder: BINDER_SET_CONTEXT_MGR already set [ 1360.135732][T27440] binder: 27438:27440 ioctl 40046207 0 returned -16 12:37:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000002c0)="c9ed2ddaf374c7f9d81111a33efba725b4046c1a42dc2f9b5453de1faa4a6463addaf696818d0a4c1278e06c210d3647f352e9597bdfef72e704760a735e4433fa877b8b62e973a843dd51cac3fdb30499a00678418e949c65bbf13206", 0x5d, 0x0, &(0x7f0000000200)=@abs={0x8}, 0x8) 12:37:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x185, &(0x7f0000000000), 0x10) 12:37:27 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 12:37:27 executing program 4: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:37:27 executing program 1: getcwd(&(0x7f00000000c0)=""/68, 0x44) 12:37:27 executing program 2: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 12:37:27 executing program 0: unlink(&(0x7f0000000180)='./file0\x00') 12:37:27 executing program 5: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x0) 12:37:27 executing program 2: rename(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) [ 1361.339702][ T8464] usb 4-1: new high-speed USB device number 20 using dummy_hcd 12:37:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) socket$kcm(0x11, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 12:37:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x48}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0x2bf70) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000000)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x10}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) 12:37:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40241, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$cgroup_freezer_state(r1, &(0x7f0000000380)='FROZEN\x00', 0xfdef) 12:37:28 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/2623], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f008004de7f9c764362ae28eff070003e0000000a08b7907080594e5d04e0d86077933b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:37:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7baf48e6d2885a09a87507e66262d39c75ebf4e43bc0609b199b6d9ddc1813a8b378368f5ed90e0ebcdac5f7a860c00269c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81070545cab5d5b0da0f0575cc2727e8d974927676468582d8621c3ac94712ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f34b52616bf84d3b042d6e432cd0e3b57239f0127473e6ba922aff649609d40b47ec349ccba3ce8d530ffff19a6471bf3abc742d9cbcfb964b13831034694a6aad86cf08a2c7b2235dc99de9aa3e6b77c7a28771f1ed72da90864987f30926c9013eec3b86836dcd9d74c9bfb78a0c0dea5362b686448ae504479f60b0ec9204d2b85627aa5a79f670000000000000000000000008f02712c3d8fc4e2686e21a855e823887196d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb0015f89e9939bc424d1bafe5725c8a4047b91da3768c1ca6a4100009f95d4ba200ff285afa8d3b4a6893d3626ab5becbcdb887af2c85c2d9ab09b5dd7d3c4406d273650bf7b2ff4602aec1eea200000064881c560c371a08e051374cf05c921a06fb78183e7e68de9dabe35f1a5d50f20209eec6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xfd, 0xfd000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) [ 1361.799976][ T8464] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1361.930323][T27477] device syzkaller1 entered promiscuous mode [ 1362.024866][ T8464] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1362.034151][ T8464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.042491][ T8464] usb 4-1: Product: syz [ 1362.046768][ T8464] usb 4-1: Manufacturer: syz [ 1362.051668][ T8464] usb 4-1: SerialNumber: syz [ 1362.234476][ T32] audit: type=1800 audit(1609418248.803:163): pid=27488 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=16380 res=0 errno=0 [ 1362.663110][ T8464] usb 4-1: USB disconnect, device number 20 [ 1362.796120][T27477] device syzkaller1 entered promiscuous mode [ 1363.249646][ T8464] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1363.739644][ T8464] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1363.929535][ T8464] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1363.938920][ T8464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.948424][ T8464] usb 4-1: Product: syz [ 1363.953129][ T8464] usb 4-1: Manufacturer: syz [ 1363.957816][ T8464] usb 4-1: SerialNumber: syz 12:37:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x108}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001640)='cgroup.stat\x00', 0x7a05, 0x1700) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) close(0xffffffffffffffff) 12:37:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) socket$kcm(0x11, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 12:37:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03FWR^\xf9\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ') getpid() r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee]\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 12:37:30 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 12:37:30 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x47}, 0xbad3, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r1, 0xf}, 0x10) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpc_clnt_clone_err\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008018190000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x3, 0x100}, 0x10}, 0x78) 12:37:30 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002980)}, 0x0, 0x9, 0x800000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40241, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x9) socket$kcm(0x29, 0x8, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x8, 0x5, 0x0, 0x80, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xe8f0}, 0x40100, 0x1b2, 0x101, 0x8, 0x40}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000380)='FROZEN\x00', 0xfdef) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000000)='./file0\x00'}, 0x10) [ 1364.098874][ T8464] usb 4-1: can't set config #1, error -71 [ 1364.126482][ T8464] usb 4-1: USB disconnect, device number 21 [ 1364.398763][T27526] device syzkaller1 entered promiscuous mode 12:37:31 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe, 0x0, @perf_bp={&(0x7f0000002980), 0x8}, 0x0, 0x9, 0x800000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40241, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x9) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000380)='FROZEN\x00', 0xfdef) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000000)='./file0\x00'}, 0x10) 12:37:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) socket$kcm(0x11, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 12:37:31 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x47}, 0xbad3, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r1, 0xf}, 0x10) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpc_clnt_clone_err\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008018190000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x3, 0x100}, 0x10}, 0x78) [ 1365.038870][T27535] device wlan1 entered promiscuous mode 12:37:32 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x47}, 0xbad3, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r1, 0xf}, 0x10) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpc_clnt_clone_err\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008018190000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x3, 0x100}, 0x10}, 0x78) 12:37:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) socket$kcm(0x11, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 12:37:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000880)='syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2a8, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa8\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0x30) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ufshcd_command\x00', r0}, 0x10) recvmsg(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'veth1\x00', @broadcast}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) [ 1366.117663][T27531] device wlan1 left promiscuous mode 12:37:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) socket$kcm(0x11, 0x0, 0x0) 12:37:33 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x47}, 0xbad3, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r1, 0xf}, 0x10) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpc_clnt_clone_err\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008018190000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x3, 0x100}, 0x10}, 0x78) [ 1366.633926][T27543] device wlan1 entered promiscuous mode [ 1366.651264][T27550] device syzkaller1 entered promiscuous mode 12:37:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03FWR^\xf9\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ') getpid() r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee]\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 12:37:33 executing program 3: syz_open_dev$hiddev(&(0x7f0000000540)='/dev/usb/hiddev#\x00', 0x0, 0x400200) 12:37:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) [ 1367.495618][T27534] device syzkaller1 entered promiscuous mode [ 1367.515529][T27588] device wlan1 left promiscuous mode [ 1368.016229][T27594] device wlan1 entered promiscuous mode 12:37:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000580)) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 12:37:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000016c0)='/dev/input/event#\x00', 0x0, 0x200100) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) 12:37:34 executing program 5: r0 = syz_open_dev$hiddev(0x0, 0x6, 0x400) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(r1, 0x6d, 0x64, &(0x7f0000000200)=""/100) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000002c0)=0xf45) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, 0x0) syz_open_dev$hiddev(&(0x7f00000005c0)='/dev/usb/hiddev#\x00', 0x9, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x385443) 12:37:34 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(r0, 0x0, 0x0, 0x0) 12:37:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000540)) 12:37:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) [ 1368.638082][T23775] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1368.655052][ T8464] usb 6-1: new high-speed USB device number 60 using dummy_hcd 12:37:35 executing program 1: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) 12:37:35 executing program 2: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000002c0)) syz_open_dev$evdev(0x0, 0x0, 0x10db42) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000640)={0x3}) 12:37:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:35 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x107040) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000540)) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f0000000800)={0x0, 0x30, 0xdd, {0xdd, 0x0, "0e1cba88ca75edf8ac01b4792579c6cfaf785b7f41d0ebb00edabb16942995df303733425ebc13da67cfa3d621c37256e9cffec799186bdbdcfa3d0818ef8827219acd92b0bf6179e69476c0d347adbd0b895e40bc1a4223429497c509b7ea950a5f045cd684f65adf2525d7e649eda47f90818fe73bada26c6ac9593e21d7b7d1ccb70b74815c900f78a9902dae8b92ea530b3c4da7344e476b38611ad98979a19bfa8367b34bfcb48314209957df4d67223099da0e138955038fb69233c2063fb3dec930c79d31d58284b5255fa94fa9d0a6f7cd6ab85e2d9ae3"}}, &(0x7f0000000900)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "fae3842f08860611455e0c87e49e438351854eb8c4a5e38bab39311db7f4b894f190c604111d53a78384c1bf8851542fba6024b0493af822a692dacdd42dc9212698006cd82d588c2379124d1832174aaf47d079e29f6e7c572f83b4fbaf94afc59876c3f11a767ac883a271afb443772619e1766105c5494c3cdde289f56a360b783a75dc6ad351bf2621"}}, &(0x7f00000009c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa, 0x2b, 0x80, 0x9, 0x2}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x10, 0xd2, 0x0, "ef05ad9a", "727bb17c"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x3f, 0x2, 0x6, 0x200, 0xab22}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)={0x20, 0xd, 0x33, "59f386294be36a5b4140022d5417f37e07db4f54bf2b5142f1f0c3b6a6b02618ba1ee76ef5de9a2c79109e0f29a18fe2e513f3"}, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xee0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x52}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "c81b"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "1c5b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000e00)={0x40, 0x1c, 0x1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x3}}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000f80)) [ 1369.168742][T23775] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1369.178379][T23775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.186488][T23775] usb 4-1: Product: syz [ 1369.191007][T23775] usb 4-1: Manufacturer: syz [ 1369.195702][T23775] usb 4-1: SerialNumber: syz [ 1369.238595][ T8464] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1369.247855][ T8464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.255965][ T8464] usb 6-1: Product: syz [ 1369.260341][ T8464] usb 6-1: Manufacturer: syz [ 1369.265040][ T8464] usb 6-1: SerialNumber: syz 12:37:35 executing program 1: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x17, 0x56, &(0x7f0000000000)="e9881159eb88a0726b3791019eedb5cf1699469f41b2697cc7b410248ed13d6fafa7c52a815e0eeda6a833a79b54effff746a9ce5505e8d256486cc82223894e6db0169caeb80e9ce38c1959a58b864dca4ab4746b6f"}) syz_open_dev$char_usb(0xc, 0xb4, 0x7) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/187, 0xbb) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff7) read$char_usb(r0, &(0x7f0000000180)=""/39, 0x27) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x20, 0x107040) r2 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x64, 0x80000) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000240)=[0x2, 0x5]) r3 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3ff, 0x4000) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000002c0)=""/34) r4 = syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x400000) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000340)=""/209) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000440)=""/243) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000540)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000580)) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000005c0)=""/177) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000a80)={0x2c, &(0x7f0000000800)={0x0, 0x30, 0xdd, {0xdd, 0x0, "0e1cba88ca75edf8ac01b4792579c6cfaf785b7f41d0ebb00edabb16942995df303733425ebc13da67cfa3d621c37256e9cffec799186bdbdcfa3d0818ef8827219acd92b0bf6179e69476c0d347adbd0b895e40bc1a4223429497c509b7ea950a5f045cd684f65adf2525d7e649eda47f90818fe73bada26c6ac9593e21d7b7d1ccb70b74815c900f78a9902dae8b92ea530b3c4da7344e476b38611ad98979a19bfa8367b34bfcb48314209957df4d67223099da0e138955038fb69233c2063fb3dec930c79d31d58284b5255fa94fa9d0a6f7cd6ab85e2d9ae3"}}, &(0x7f0000000900)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "fae3842f08860611455e0c87e49e438351854eb8c4a5e38bab39311db7f4b894f190c604111d53a78384c1bf8851542fba6024b0493af822a692dacdd42dc9212698006cd82d588c2379124d1832174aaf47d079e29f6e7c572f83b4fbaf94afc59876c3f11a767ac883a271afb443772619e1766105c5494c3cdde289f56a360b783a75dc6ad351bf2621"}}, &(0x7f00000009c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa, 0x2b, 0x80, 0x9, 0x2}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x37, 0x10, 0xd2, 0x0, "ef05ad9a", "727bb17c"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x3f, 0x2, 0x6, 0x200, 0xab22}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)={0x20, 0xd, 0x33, "59f386294be36a5b4140022d5417f37e07db4f54bf2b5142f1f0c3b6a6b02618ba1ee76ef5de9a2c79109e0f29a18fe2e513f3"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xee0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x52}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "c81b"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "1c5b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000e00)={0x40, 0x1c, 0x1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x3}}) [ 1369.500212][ T8464] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1369.530251][T23775] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1369.597656][ T8714] usb 3-1: new high-speed USB device number 19 using dummy_hcd 12:37:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) [ 1370.218118][ T8714] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1370.227382][ T8714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.235584][ T8714] usb 3-1: Product: syz [ 1370.239994][ T8714] usb 3-1: Manufacturer: syz [ 1370.244685][ T8714] usb 3-1: SerialNumber: syz [ 1370.247629][ T9591] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1370.397783][ T8713] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1370.417886][ T8714] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1370.462118][T23775] usb 4-1: USB disconnect, device number 22 [ 1370.635560][ T8714] usb 6-1: USB disconnect, device number 60 [ 1371.077538][ T8464] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1371.285452][ T2964] usb 3-1: USB disconnect, device number 19 [ 1371.318687][ T9591] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1371.325786][ T9591] ath9k_htc: Failed to initialize the device [ 1371.332661][T23775] usb 4-1: ath9k_htc: USB layer deinitialized [ 1371.477386][ T8713] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1371.484596][ T8713] ath9k_htc: Failed to initialize the device [ 1371.495474][ T8714] usb 6-1: ath9k_htc: USB layer deinitialized [ 1371.708203][T23775] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1371.923313][ T8714] usb 6-1: new high-speed USB device number 61 using dummy_hcd 12:37:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 12:37:38 executing program 0: read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/187, 0xbb) r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x20, 0x107040) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000002c0)=""/34) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x400000) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/209) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000440)=""/243) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000540)) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000005c0)=""/177) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f0000000800)={0x0, 0x30, 0x2, {0x2}}, &(0x7f0000000900)={0x0, 0x3, 0x56, @string={0x56, 0x3, "fae3842f08860611455e0c87e49e438351854eb8c4a5e38bab39311db7f4b894f190c604111d53a78384c1bf8851542fba6024b0493af822a692dacdd42dc9212698006cd82d588c2379124d1832174aaf47d079"}}, &(0x7f00000009c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x80, 0x9}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0xd2, 0x0, "ef05ad9a", "727bb17c"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x3f, 0x2, 0x6, 0x200, 0xab22}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)={0x20, 0xd, 0x33, "59f386294be36a5b4140022d5417f37e07db4f54bf2b5142f1f0c3b6a6b02618ba1ee76ef5de9a2c79109e0f29a18fe2e513f3"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x52}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "c81b"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x17, 0x6}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "1c5b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000e00)={0x40, 0x1c, 0x1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x3}}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000f80)) 12:37:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000580)) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 12:37:38 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="e6", 0x1}, {&(0x7f00000003c0)="f0", 0x1}], 0x2, &(0x7f0000000780)="80279da904d58c358f2add7a1e869b1e18a4186753aac15bc42c59d24e015146a6ea1386f9", 0x25}, 0x0) [ 1372.117105][ T8464] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1372.124218][ T8464] ath9k_htc: Failed to initialize the device [ 1372.171435][ T2964] usb 3-1: ath9k_htc: USB layer deinitialized 12:37:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) [ 1372.577324][ T2964] usb 3-1: new high-speed USB device number 20 using dummy_hcd 12:37:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)) 12:37:39 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) 12:37:39 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xf]}, 0x8}) [ 1372.727256][ T8712] usb 1-1: new high-speed USB device number 12 using dummy_hcd 12:37:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x1) 12:37:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140), 0x2) [ 1373.278446][ T8712] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1373.288778][ T8712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.297274][ T8712] usb 1-1: Product: syz [ 1373.301550][ T8712] usb 1-1: Manufacturer: syz [ 1373.306241][ T8712] usb 1-1: SerialNumber: syz 12:37:39 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) [ 1373.512243][ T8712] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1374.166735][ T8464] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1375.238840][ T8464] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1375.246206][ T8464] ath9k_htc: Failed to initialize the device 12:37:42 executing program 0: socketpair(0x0, 0xa, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000002c0)=0x1, 0x4) 12:37:42 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x26020, 0x0) 12:37:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 12:37:42 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)="80279da904d58c358f2add7a1e869b1e18a4186753aac15bc42c59d24e015146a6ea1386f9", 0x25}, 0x0) 12:37:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)="80", 0x1}, 0x0) [ 1375.958723][ T8712] usb 1-1: USB disconnect, device number 12 [ 1376.130574][ T8712] usb 1-1: ath9k_htc: USB layer deinitialized 12:37:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100), &(0x7f00000000c0)=0xc) 12:37:43 executing program 1: bpf$MAP_CREATE(0x9, &(0x7f0000001b00), 0x40) 12:37:43 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x700) 12:37:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, 0x0, 0x0) 12:37:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:43 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) 12:37:44 executing program 2: socket$inet(0x2, 0xa, 0xc2d) 12:37:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}}, 0x0) 12:37:44 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{0x0, 0xf0ff7f}, {0x0}, {&(0x7f00000003c0)="f0", 0x1}], 0x3}, 0x0) 12:37:44 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12:37:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 12:37:44 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x15, 0x0, 0x0) 12:37:44 executing program 2: bpf$MAP_CREATE(0x18, 0x0, 0x0) 12:37:44 executing program 5: bpf$MAP_CREATE(0x17, &(0x7f0000001b00), 0x40) 12:37:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 12:37:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20}, 0x0) 12:37:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 12:37:45 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}], 0x1, 0x0) 12:37:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 12:37:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x1}, 0x2) 12:37:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'rdma'}, {0x0, 'cpu'}]}, 0xb) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:45 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000001780)={0xa, 0x0, 0x0, @mcast2}, 0x20) 12:37:46 executing program 5: socketpair(0x8, 0x0, 0x0, &(0x7f00000047c0)) 12:37:46 executing program 1: r0 = socket(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 12:37:46 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000002040)) pipe(&(0x7f0000002040)) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5d}, 0x0, 0x0) 12:37:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 12:37:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:46 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0xa, 0x0, 0x0) 12:37:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 12:37:46 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 12:37:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:47 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0xb, 0x0, 0x0) 12:37:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x0) 12:37:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}}, 0x0) 12:37:47 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:47 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) 12:37:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000200095002b4e00000000a472e2c52158a4833fb96f884dbf9a7a01e31780e9e3cd7f325a496d6b89d8f00f5f1a7d62d3ec2a10ef9eeb7c62ec777cf3955894338994055225581be4cd5f238e99b360d8d950c320ec266ebe9bd8650a1573be0aba07c78ae66c9c3cd583204ba31fce894387bf66c29883eab67b8ea7714707d8f2ff371915bc195eab207e88c29e77bd01c5bc778c89b0e35447a442f38e47663c84c6a37ea3dd54062e1c476cdeec6f5974faad1a67eeb35b68f3cfed52c2daab02bd697818e5058554305d882c2e0d069e00c5ac7fb88a38a342385b2a8c31d942e962e6d384749098ea29000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4103, 0x1007}], 0x1}, 0x0) 12:37:47 executing program 0: socketpair(0x1d, 0x0, 0x2, &(0x7f00000047c0)) 12:37:48 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 12:37:48 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x7ffff000}, {0x0}, {&(0x7f00000003c0)="f0", 0x1}], 0x3}, 0x0) 12:37:48 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 12:37:48 executing program 4: r0 = socket$kcm(0x11, 0x0, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:48 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000ec0)={'wg2\x00'}) 12:37:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 12:37:48 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r0, 0x0, 0xa, 0x0, &(0x7f0000001080)) 12:37:48 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f00000047c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:37:49 executing program 4: r0 = socket$kcm(0x11, 0x0, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:49 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 12:37:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$rose(r0, 0x0, 0x0) 12:37:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) 12:37:49 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 12:37:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc020660b, 0x0) 12:37:49 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0}, 0x0) 12:37:49 executing program 4: r0 = socket$kcm(0x11, 0x0, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x8, 0x2, 0x3ff, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x5, 0x2, 0x101, 0x2, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 12:37:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 12:37:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 12:37:50 executing program 3: syz_emit_ethernet(0xfc0, &(0x7f0000000180)={@dev, @remote, @void, {@ipx={0x8137, {0xffff, 0xfb2, 0x0, 0x0, {@random, @current}, {@current, @current}, "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"}}}}, 0x0) 12:37:50 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:50 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x0, @multicast2, 0x0, 0x0, 'wlc\x00'}, {@multicast1}}, 0x44) 12:37:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x40049409, 0x0) [ 1384.018825][T27904] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 12:37:50 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)) 12:37:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xaf8077ac7999e557, 0x0, &(0x7f0000000000)=0x5d) 12:37:50 executing program 1: socketpair(0x3, 0x0, 0x4000000, &(0x7f0000000300)) 12:37:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000200), 0x10) 12:37:51 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x5452, 0x0) 12:37:51 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:51 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001940)={0x14, r1, 0x621}, 0x14}}, 0x0) pipe(&(0x7f0000002040)) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5d}, 0x0, 0x0) 12:37:51 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)) 12:37:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000016200)={'tunl0\x00', @ifru_addrs=@can}) 12:37:51 executing program 2: r0 = socket(0x23, 0x5, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14}, 0x14}}, 0x80) 12:37:51 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000780)={&(0x7f0000000080), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 12:37:51 executing program 5: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002300), 0xc00, &(0x7f0000000140)) 12:37:52 executing program 1: r0 = socket(0x23, 0x5, 0x0) connect$netlink(r0, &(0x7f0000000100)=@unspec, 0xc) 12:37:52 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:52 executing program 2: socket(0x2, 0x0, 0x2cc) 12:37:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b30, &(0x7f00000000c0)) [ 1385.663439][T27939] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 1385.816097][T27939] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock 12:37:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x9}]}]}]}, 0x40}}, 0x0) 12:37:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x28) 12:37:52 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="f9ffffff"]) 12:37:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, "bf25027ddd8b306b"}) ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000200)=0x7) [ 1386.329370][T27961] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1386.342910][T27961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 12:37:53 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x0, "37a115427a96e45bfcff18df2c920b1c3fe389"}) pselect6(0x40, &(0x7f0000000040)={0x1}, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 12:37:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a0", 0x1}], 0x4, 0x0, 0x20}, 0x0) 12:37:53 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 12:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)="2d165f111ffb71003e3c4038d91af059d9d7a3abb2adf1e9fbd10022e48dc828", 0x20) sendmsg$unix(r0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="00002e2f66696c653000af62b6ebe58364e65d7ed3037c0cddf857b4d0f0abf040c609b89a970af178ab0b9de52075dca1174dd16591ead1524eb0da2bd44c309be8d97eb1a17ec4da2583ae23bd771e4fb5fa46d5e0ebcd02ca072a9111b87a1f"], 0x8, &(0x7f0000000780), 0x10000000000000c7, 0x0, 0x20}, 0x0) 12:37:53 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60be02d1001000000000000000a800000000000000000000000000000000ef"], 0x0) 12:37:53 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:53 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60436c8000243300fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00010865000000840006"], 0x0) 12:37:54 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000102b00fe37937926d42de3c11c9d8000000000000000000000000000bb"], 0x0) 12:37:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x3, [@enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @array, @fwd, @int, @typedef, @const]}, {0x0, [0x0]}}, 0x0, 0xe7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:37:54 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 12:37:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:37:54 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:54 executing program 0: clock_getres(0x999b59f1ff28dcd3, 0x0) 12:37:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:37:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:37:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xd0, 0x108, 0x0, 0x0, 0xd0, 0x2c0, 0x318, 0x318, 0x318, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'netdevsim0\x00'}}}, {{@ipv6={@local, @dev, [], [], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="01b3"], 0x5a0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "0fcc29d4065cec82e59764affe1cd49310"}, 0x15) 12:37:54 executing program 4: socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x538}}], 0x1, 0x0) 12:37:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:37:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:37:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_mreq(r0, 0x29, 0x6, &(0x7f0000000000)={@ipv4={[], [], @dev}}, 0x14) 12:37:57 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="000826bd7000ffdbdf250c00000006002800000000000800390000000080060028000400000005002f000100000008003b0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x20040065) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev, 0x0, r2}) 12:37:57 executing program 4: socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x32, 0x0, 0x0) 12:37:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000380)={'batadv_slave_0\x00'}) 12:37:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:37:57 executing program 4: socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:57 executing program 5: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x0, 0x8c, 0x30000, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002ec0)) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 12:37:57 executing program 0: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002ec0)) 12:37:57 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 12:37:58 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 12:37:58 executing program 2: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:37:58 executing program 0: r0 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='@,\'\\+\b{!-[\'\x00') 12:37:58 executing program 4: socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:37:58 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/nvram\x00', 0x80440, 0x0) 12:37:58 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 12:37:58 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 12:37:59 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) 12:37:59 executing program 4: socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:59 executing program 1: migrate_pages(0x0, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x1) 12:37:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x359, 0x0) r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x30040, 0x0, 0x8}, 0x18) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1298c2, 0x40) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x2, {0x7ff, 0x401, 0x6, 0x1}}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3d4c3) 12:37:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000009c0)) [ 1392.892339][ T8464] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1393.147177][ T8464] usb 3-1: Using ep0 maxpacket: 32 [ 1393.172356][ T2964] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1393.273209][ T8464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.284428][ T8464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.294657][ T8464] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1393.304674][ T8464] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 12:37:59 executing program 4: socket$kcm(0x11, 0x3, 0x300) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:37:59 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80105013, 0x0) [ 1393.315041][ T8464] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1393.325058][ T8464] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1393.413242][ T2964] usb 1-1: Using ep0 maxpacket: 32 [ 1393.535737][ T2964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.546912][ T2964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.556991][ T2964] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1393.567154][ T2964] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1393.577129][ T2964] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1393.587005][ T2964] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1393.622306][ T8464] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.632067][ T8464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.640175][ T8464] usb 3-1: Product: syz [ 1393.644545][ T8464] usb 3-1: Manufacturer: syz [ 1393.649234][ T8464] usb 3-1: SerialNumber: syz 12:38:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) open(&(0x7f0000000200)='./file0\x00', 0x1013c1, 0xf8) syz_mount_image$nfs(&(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x1, 0x6, &(0x7f0000000840)=[{&(0x7f0000000500)="a30a48e34f5542fb39b2d9ee59877bd8e20a6b63e5adaf5fb5db51035d5efcde5d17e79f78d89091726413ef2501a700447ca263bf5ae2cd4706ac20726c36217f8e2cc9c49b1aada5eb725c95c0a5c97dc64f63d2d7b9a6cdd49090d2a50747d3a698d2f633391b236487166f49c2692c378209", 0x74, 0x7e}, {&(0x7f0000000580)="38dc081b96db2b22c6cc0121f9cc495ae5487961453670fc6ccbeb33e64284f564ffa1db7e81cc47358ec08a94ad6d539db8bcacb5a107f35ceb777e3d886667aa7e148fc03930a184b4b6b72bee9d26519ffcd476b25960ba363a9dcac13cf448909aa9b25ee91bdc6eb7db13f04a94ba7faf1b9d07367993fe9196682835260e5da7573013d9ea16c93a400bf5ca7b7ecbb4371c12", 0x96, 0xfffffffffffffffa}, {&(0x7f0000000640)="3227ffdda2317fa41efff2d9d3b4182648e74ecfdb14cc39f036514b4b97e29ab1331d8b58343b9278fc404aa154e7c7d2a2c17a299999358004f9ac985e7830c9f3ba083cee4cd421d25474904910f0a20223bf62ece76541500173a79104c0e118d5ec2bb1fdeb5f6c672e0a4f5da19589f81a44c39107", 0x78, 0x1}, {&(0x7f00000006c0)="602d739329a1d0ef85e232a67d747845c06904d9aa70d38caf4d9212aa890a591e3f3ec1654eb1089cb05e86b9fc910a8a42083679b325a8654800024793f9ba209214d64aa0be6546ed44074bd0c0640ebe0732baef4144060b1a52188b23dfa46e139c8ac65a4e90cdd5e0b3b769c67923b22d46833aa013737590bd4fee54fd314fe27b0047da5a9fb018c1ecbefafc64404a0ed894144e84353843f63bf21df6cbccf63d6e38c98b4be05948ffd839654e7d8fcd9f72f21018c749a2f120cbb145f0361d34e17c85d646f5e54b", 0xcf, 0x40}, {&(0x7f00000007c0)="b0bace81b3296c9a134e00fe021c79d486dd19e193e60ca5f4e5e2bfd530a75461aab94e347611fc7e1301bf1999d2f05accf41091fe2f592bf6ed195da7681f5257b9ec4c4b4808d6920e0c207e166c5ea680cb2eceed916f", 0x59}, {&(0x7f0000001700)="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", 0x1000, 0x5}], 0x10001, &(0x7f00000009c0)={[{'system.posix_acl_default\x00'}, {'/]-'}], [{@euid_gt={'euid>'}}, {@subj_type={'subj_type', 0x3d, 'system.posix_acl_default\x00'}}]}) [ 1393.968558][ T8464] cdc_ncm 3-1:1.0: bind() failure [ 1393.983191][ T8464] cdc_ncm 3-1:1.1: bind() failure 12:38:00 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) 12:38:00 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) [ 1394.108564][ T8464] usb 3-1: USB disconnect, device number 21 [ 1394.253326][ T2964] usb 1-1: string descriptor 0 read error: -22 [ 1394.259778][ T2964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1394.269220][ T2964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.329727][T28121] nfs: Unknown parameter 'system.posix_acl_default' 12:38:01 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) [ 1394.509061][T28134] nfs: Unknown parameter 'system.posix_acl_default' [ 1394.631948][ T2964] cdc_ncm 1-1:1.0: bind() failure [ 1394.646831][ T2964] cdc_ncm 1-1:1.1: bind() failure [ 1394.735013][ T8464] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1394.795054][ T2964] usb 1-1: USB disconnect, device number 13 [ 1394.994450][ T8464] usb 3-1: Using ep0 maxpacket: 32 [ 1395.142771][ T8464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.154404][ T8464] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.164801][ T8464] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1395.175924][ T8464] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1395.186139][ T8464] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1395.195986][ T8464] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1395.401930][ T9591] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1395.402524][ T8464] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1395.418951][ T8464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.427210][ T8464] usb 3-1: Product: syz [ 1395.431536][ T8464] usb 3-1: Manufacturer: syz [ 1395.436230][ T8464] usb 3-1: SerialNumber: syz 12:38:02 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107446, 0x20000000) [ 1395.641906][ T8464] cdc_ncm 3-1:1.0: bind() failure [ 1395.642040][ T9591] usb 1-1: Using ep0 maxpacket: 32 [ 1395.655559][ T8464] cdc_ncm 3-1:1.1: bind() failure [ 1395.697305][ T8464] usb 3-1: USB disconnect, device number 22 [ 1395.773438][ T9591] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.784678][ T9591] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.794780][ T9591] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1395.804809][ T9591] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1395.814797][ T9591] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1395.824703][ T9591] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1396.092989][ T9591] usb 1-1: string descriptor 0 read error: -22 [ 1396.099457][ T9591] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1396.108932][ T9591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:38:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@codepage={'codepage', 0x3d, 'utf8'}}, {@codepage={'codepage', 0x3d, 'cp866'}}]}) 12:38:02 executing program 1: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x4800, 0x0) 12:38:02 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x82002, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)=0x7) 12:38:02 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:38:02 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:02 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000200)) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) [ 1396.318797][ T9591] usb 1-1: can't set config #1, error -71 [ 1396.362873][ T9591] usb 1-1: USB disconnect, device number 14 12:38:03 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) 12:38:03 executing program 3: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000), 0x4) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:03 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:03 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x5, 0x9, 0x6, 0x3}, 0x40) r2 = dup3(r0, r1, 0x0) sendmmsg$alg(r2, &(0x7f0000001740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18"], 0x18}], 0x1, 0x0) 12:38:04 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:04 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xc6100, 0x0) 12:38:04 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, 0x0, 0xfd00) 12:38:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x2f) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) 12:38:04 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) 12:38:04 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000200)) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) 12:38:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x5, 0x9, 0x6, 0x3}, 0x40) r2 = dup3(r0, r1, 0x0) sendmmsg$alg(r2, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="eab04ab200e07e5484768dc9a53dc1040779d2ebf668f02174bd3742f4a5822232b5c963638c50b4a9c825f5f28eb0e64ca97e143fad924e67527594e94d86f966a458bdff76a84d94bec0f366a5809888e33485188d82d542aae2a2440cabce3c1d54cc61e5da3fccee34d28fe7f695ac42a03dd73fad840d3ad9eb7555e53ebf9341d7b20325", 0x20000187}, {&(0x7f00000001c0)="3dca88141e1f59af71f19354e1b4e0bbbeb7fad763fec85aafaed4cbd0e1e4e30433fda1e21e346fb7f1a2589d913a051b0c9b50f2a4acc34c15ea23f320e4849df30d89be160eb3f81d05813cbfbd19cd6e6fc8c1805fe797ebec130075e29e375834a58014f74cdaf77e212ae43990f594aa195cf601c34a0908c8ff3a0921c61a8d8220", 0x85}, {&(0x7f0000000280)="46e9d46926bc386c9d160d724b2580bfe8993dfd23a7a0910b15b780e4c244075cf33a49507c08923729872dbb03a519f1017fb1b2a2f3a69f135cbde23a9f67b4eb30c639323d77f6c72869e35c4cc579f0724bc66b21fdc6d8715b8fb162493f5a3781e9775b44882ae9ce9b3939c99487f94d534276daca58a207f7deb5402234a8ce436094c3fd5f748c23f401dbb9a8f0060895a8d2d09e595b0b98bbc38b9c6f67ab30c185927b3f4ca6e8fbfe571cc5efbb675ac6177e8fa767365d4c", 0xc0}, {&(0x7f0000000680)="a9149b235012d6985f0c6026c2f1bb74fad97d681bdc5cba861619fc9980f1a09ad305bf15d01088b2f99610a2f933c0c26c8d75619f8344614524c89437c051ddbf9ea8c083ac74d824ef5cb84514d26df94478ca14218d952a78730384d7efb0f3ac4fd23bf5d16a5d7c771d7ef0841e480cb9621e7dec83ef85479afc1b9e3eede827627bfa0fb644cceaea19b4ccaf1abda9cb419b04ea6debd51fb06f59636c3b295840ba7df37ec2662caca3e687369340803a7ab899b4e7e2b8ddd3358b9bbb95eb6fb4a628005d820dfd21aa511cd81e54b76304f525abd73560d23672dc4b3f8b7414aa052a47b6108fec824aa6781ff657216235e2522b9b3b2e5c7374c9a233b28dd374e527c99e244aaeb4b7bd21601b9aebb77f661098b3850f55aeb93926d2d7331d85de74ac4755bc717cb7e9c449cdb16ad02e05c7949b8b5e53a692916d3bd33605f2e715aa21e445fea32346b4913633ef32a354d54b950f2db75e463883e94f168a5f0bee71eaf025d54a862b709b527e55c85115fc12af03829caff6c997497af04891a405e39d79f609ee7c097c3057e58d31d4ed1ef26b532a46e14e0d4f0feeaabdb9ee6d7c0a0dcd346df73b62b6c2cac220e7ec37043f2677a9c2a8749c5901d4ba5d84e72e8f6234fecb718862a0c437f92ee8e3845a4f141bdfcde85171715126d31dfddefd480664e56f3ab68c91f56bc66e6cc202bca72040effd6e1c1cbf23357cafb5eaa46c8b5594cb529a67ecd3cc18f2144b801fc090260eab8141c941a48b17eb578b09c52c323fb641a1ff49b7bc68a13e3c7b3f881a5852cc2c5de4598b47c6ad6da90ffde33a6d623f7fc039caf8e121f4351d4df1439416f4940f49456e8d95d23aa2f20a00691223e0fc8e0cbef6e5eb1a97b32294e98ef7c285d5be7e3c78e33c333b2adc6d42857f52f6e2a33c21b78d9bf1e2a020b49dd345a75b1737e41d3e676fe438c882f12f95a89e602959df082a3f6198df2de048b3a4063443bea144f5964597f9e4f4feef589c72cf56f1de2e0e82b6554d8adeebc5de03a12d2590af20c93ad3279121c180368a38075688c0e1d9edfc1db93e98514ea5000282f722d8daa4e551d5fa9258c0176a4ad61321327d9528d5a8650d7e1d35ca339f3783c5854bba83b7a29b771667632be3001e6f315c866d5130eccb0163e0c034939da2bdfdaa7e67688c40cd001168e02037e372c862370163c96fee82b503810fd0080470a9a4aea7191e9ff428c6bca512d5108fdeddbe6a36b9ff8875dfa934e8481ef3c2ef568c5d10341125ce0a517806712fcf55582fa0363ce0475f676b1ed125d2d2c308731edbb688ce952b56c251befac2288edfa08099c43573e00b79c592dfeda77ff544c55309b7e06d980e8ce0c08841769904d3f61569d9446de7aa3fd99be37e5fcb09b84a56cc7306dfbd70d9287de54a0f2efd4097053cc47ffc448fb0c6e0d925858852e4267a2cb9ca4c77fee7268f57173fefa6cd7ed5de92bbe035ed0ca194f662a18f1948bb1650add7bd2bd5dd75b874f565ab3147e68eaae8e91863bcf75a38c3659d6754d48c9f2c19c73d8a9d08ef82eab5d56c75ccaec563ca23d530e26102cd3622429ff717b0f1ea6df04ba4368b4cb4cf81d24414c7d080dc0821f321a1c7b15be9bc03a171bfef4c3be5e958fabe9378194e5b41de920ed519696b2f1d023b9585b80f14b9e8c65818bd634a431ea1d0cd48cc51270de5088a6eac3e8fa9208e77be9c5a7c6ee56904cb03448f829b1ca0d339694d020dc1c88fe67633372067e05fc94b5f8e39b6c4062620f02f740bdb75c4f6385c1aad7af3ae8e269a770e6604e09423bd900f937d2cbacc10856b6fc2ff61455bf3e516e7f4890f4597abace36149102ec0cbf86773f903ceb4aaf8dce08a80fe4e4c965eac43adfcbb34f229c07ba705a256fc0e450039c6e894892cae31857eefc1d0e35e1f5acdc1c8f69ef361d79a0b3030534d172b366d6da6072543d133a88c0968620c9ab62fb5edf104a19b3422b1c8d423560161fb44f98b7a004cef2757d97bb3e969629fb3affdc023a31593729e8857ede521844b658dbc80bd5e976e71375d587309da46e3a3595b3005cc503e436e35b36f535577c0dd8f1d6bc571c714ff15695e8dec94a7446839a35b3d62ffcbc7bd929f8b85b1849c1d2297add49fbcafef865acacd2c34bfb860eaf94efb8c73c49a7b82872c96c082ca3c855459d13671ac7e1e79fca2bfe987d18ce9e9de09f2e98a059257223be5f3ac1f970120bd4fd042bb8ab54cbab3fee3995cc55beddbb3397fb4ee6d502c6de57c7c819798e55f40144d5379262f6ca47e19e7224dc6284b96a78959d496c5a7adc426b5efa7457e2984f6b4fc00fc088602c2dd587146e8779c7b9bec8bb498dfa9230ce6bc9ec94f19862ba71a132cb1f5e16b35d41f370b297cab86876d3968a281ea5abb1b44c6eb5da46c71a8cb88ba166ee9a427d95c1827b8202cb0e2d47231650ffc64ca3c127a614e4f0cb80057b06df9d3fdd6a63bf0e823fb477874a6ce2ee9caf928244395c63e84e47aaf6b38ea00cd90572812997d5ccc9e697568fb391c1ce528f2412386122e67344051579d61b90cc81ff1b365f0c2f7499a1cd060114012506a645ca282c91eaa7026be2210edc4db1d314fab8516cdab5d8d0b54818752c19f839583900dbc7d79faa83c63a96bcbafd74db5bf822252ba660d7132925ed3f87a08d26a025690a0153820b9be5cf07605658135fa4f499fe4ae058a542c7adba05cf743f22d0a94eeef2345aca433537cc8b7b02509d4fc955301c60295e72eaa1cdd8320939d69bcf09915902989eacd11a076a01a34d5f01c2308a0d4ddc74e1cc954554e62aba895886771f8a9c3c88d7bad3d7664917b0a9ad65c73b186a3fc148b398fb917fcfebc140a4e458eb10015839c1c53ece7c8915d09a8d63acc6bf5ae6199eea8b9d630ed8b703aa0b31eb3a37ef3d9fc55506c07bf46f95dc6351c9e941d35ac99e7981ea4df9ed61ce9f9c0a460cc7e10e36d1196478ea849650e64e601c7fa58197e181c03d549cc1a55055b4a42d1d3cbdfae10278945ab7a0c9f4753af3ca34417641b1d6466509d44b75eae7628a235f6708901177a2c521f3433dde9a6653f9be03e8eac2fc90dad24b0d8aa8716858708a5ecb981a6f6eee71dc988eee4b8a1c8ee4e2c8fb803f07448c840629071df405b0f520de1820da173a9a03797ce74944e884b7943ea095408ed2e0bceb57c45063a47c349f33496c16a285a72e6406ef5947fda024f829bf972f85b98e658782f4e1430eb566c872c68a40d0256b13585e304ef62848c215f436d61da1ee52d5256ad4c1b146d02af36f430acc24a400596ed344daf5917e60c91dc7ac8d06217cc03e16be2277da51f1037b7fae33aa2ed70a142c7c1db034f762ff592359bfd44f6176d522c846d8f8a9328712d98bad9477af8116bce9790eecb0c045558776c87c8c3f31f0dd6081e9ce6c445e334641e49cad8d73602df3b76b1b9c12333002e30c44d9ebbe02e52a42f52e93073719c91ce5cb570096f83eefc55ea3426c147a7988a6ef3cad968559ab12b9e9d4b86587362b708f1bc4985e59c58c9c1c963ecd63b2dfb8213811cfaf2fb29ea398ec48b01a459a09666bdad74ad4304ddc329f7dfd3a32e97dcb44c31fce9a1b839e2418ccd0da1603d952a265e510a62aa520c2bd9e170c1ee16f662855625fc1975d996c2aa7914c76f3b4799a7b3b61c9130623a92a6a0248eda36dddbb15c5ab5e18066c39af80bf8ff4858ede278283c0d38752275f2f73005267fc10b37e4a93620f5aa78468bdfe49578eddeb4360db014b0ffeccc3c88b3a522fa381542a3b1bcb4c46ea2872f7f53d6dc2bc20d68aed93dbd37c9d9949030d1dd270849fa4a1a52f90523ff25700f00f958fdb6470bdbfbfcc4b9ab263313ba06518a289844dc42cca140010b8b9021b49fb5c6b2aa9397ebe6da63aec5817c97586ef82df9835fded42c9a98a182fba016a3ba34ba7ae8c12228844b754f3c9b91316d7b2de7541b6b6ffa6d262b7257f8f4c61a644f2d40b64298d4639fbaadda56dbed3c1580e1ce9ecdbdcb73a78b916dbf63680e2d8414a16e3a567bb68f3b32901fe0b2fd34059efcbc7532ae0c2ac58d460c4e08922b3f050e4eb17eddd0e7688ac19959d466e253d14eeb54d117b884ffbea323a5e16c7738a22ed67e83cce884bc092b960c7ea9b751840839c63bf7ad86d83a59e37ed93e29638d78ca9b634f2f6fb4400caef8cf26c5cbce221d20b74c769ec0898fb728969da7bbd29f77ae5877aa928db284b82b896b3172d953eb8b64ea19d5c0dde7cfd0745519befe908b82c999cb2250146786a5b097869ebd7a983e3f0c26d1caeb8bb36f11b23489916feaf231a51781a06083625dd9d806069bdb1ef4d4c5951e51ca0fa37e4d397d1c581efc00c87d70bc697c773e42b2286a1102f450bac7b0c69c92c51f314a640c67ce1a7b5e1cae03beba6dfe5c88ffb4552ccce15348ee711c50c564a8cfd2d95caaf368d43034ad0388407a3a74b59a7aca9655f94a34d44279cd302e5e96804e9cb9a8dcb37f3bd58a34a05d18e6f79cd237300c84ee2e5fb99621f1d92eec9cd452ef77d987825070f1f2d87087a592293204defef5a687d70607c656d741211707146f9bbd0f8b867009ad27c20876965fca3b385e4d83a346b47d05a73f2858bc5cef5d3aa6ad9f182626ac69c83f0163a4b6e0453864ccb9e180e8d8cd9144630b4b41d9ec850b6cc8fa40648c6cafabdccc4a945a66d4ed85711ce348687c5ff6df50263f066ac46931f7cc14073ef85fae8dffed53c1ea706b3c368748e52f8fe85c49ab67b2358054ebc44dce89f69fc6d46bea9f50ebda79897053cfc19bc64e797460c914458c7e0c1e001913ed8b3c38cfef5addde1c67778a367c49696313c4bddc5fd4e78d94966cc405633d27e3322e36cb11bdc5bf3ecbe42ca17133ed82b79d3b8a7f2468fd28367fc71457fdc58b06602157597c990ae179f90c85d62de949789e8f8b0784fafbe602837f4d11ca938d0e52588e6a30ee9f831509818cbc668749df3e6203dee2990cd7969b19c0c81f773b7c76551c1e084cb05c74dda6100786e9d998cc5f768d1ad31a33e1df81a858abe37653b70f1ff9623095f7d3008cd9ad4071fd80cd623d3d3dddaf219a952028c2fabd7996aed26049741513a59deb47882de6d475c7540b0059d4e8fc1b79646a09e55baf3fff2f0e206734ee4dfc2ac4e17f254b71c496615c6dcb3e6f6d9392c6fc28761e1513b509adf4386bd21b21ce8fe19c387199232ac38b596e25f318d7f9a3d4921fde9c449136edf03810194dbef22010f983c47bdbf3d3ed00ee27f33bd684e17230e88832728e8ea09b91ce323485ac0f4f05cf0b012cc346cfbde99e054897a0ab5f32cd4da01ec1aeaf717462cdc1d6b4218d6fba1b201d6bd11791f07ab7ebfb4e6f239c1138106a13edfefaaf483b518f5a69832de70d8daf306f0e808e942f43b5f1f06a071861590b395c2ea57ec49d68f34457a4d38e2a46183da9261e9a2d9a1856ce39ae474e6f6485b9981177172ab94d787156ccc87105b365b92a5f564132c06d0887415eab6e72c75eebdcfc59b5c29ac33a829be0c4c88dc7d1ba76b182add2a834d7c58a931030b51775c142099b48fa5642875d0417298167008280746ff20ba4", 0x1000}, {&(0x7f0000000080)="9c46725d", 0x4}, {&(0x7f0000002640)="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", 0xcf1}], 0x6}], 0x1, 0x40008c4) 12:38:04 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, 0x0, 0xfd00) 12:38:04 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:05 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, 0x0, 0xfd00) 12:38:05 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x2f) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) 12:38:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x24) 12:38:05 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080010000f50111000000080211"], 0x2f0}}, 0x0) 12:38:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 12:38:06 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0xfd00) 12:38:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 12:38:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0xd4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "f1cd1f19ebc5e1d4b07316c7b9d1e55fa6d5bc0dcc15f0619a"}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0xd4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d302330080010000f50111000000080211"], 0x2f0}}, 0x0) 12:38:06 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000008c0)=0x7e4f) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000340)=""/101, 0x65}, {0x0}, {&(0x7f00000005c0)=""/227, 0xe3}], 0x7) 12:38:06 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e00000001090224f200000000000904430017ff5d810009050f1f01000000000905838b36"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) 12:38:06 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:06 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0xfd00) 12:38:06 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)) [ 1400.590616][ T8465] usb 1-1: new high-speed USB device number 15 using dummy_hcd 12:38:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) 12:38:07 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0xfd00) 12:38:07 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) [ 1400.841268][ T8465] usb 1-1: Using ep0 maxpacket: 8 [ 1400.965228][ T8465] usb 1-1: config index 0 descriptor too short (expected 61988, got 36) [ 1400.973976][ T8465] usb 1-1: config 0 has an invalid interface number: 67 but max is -1 [ 1400.982569][ T8465] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1400.991648][ T8465] usb 1-1: config 0 has no interface number 0 [ 1400.997876][ T8465] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1401.010694][ T8465] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1401.022205][ T8465] usb 1-1: config 0 interface 67 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1401.035570][ T8465] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1401.044816][ T8465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:38:07 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x0, @local}, 0x80, 0x0}, 0xfd00) [ 1401.409614][ T8465] usb 1-1: config 0 descriptor?? 12:38:08 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000040)=@phonet, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)=""/27, 0x1b}], 0x1}}, {{&(0x7f00000016c0)=@ax25={{0x3, @default}, [@default, @rose, @remote, @rose, @rose, @bcast, @null, @netrom]}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/127, 0x7f}, {&(0x7f00000017c0)=""/189, 0xbd}], 0x2, &(0x7f00000018c0)=""/130, 0x82}}, {{&(0x7f0000001980)=@nl=@unspec, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001a00)=""/80, 0x50}, {&(0x7f0000001a80)=""/19, 0x13}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000002b00)=""/42, 0x2a}}, {{&(0x7f0000002b40)=@qipcrtr, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/209, 0xd1}, {&(0x7f0000002cc0)=""/123, 0x7b}, {&(0x7f0000002d40)}], 0x3, &(0x7f0000002dc0)=""/4096, 0x1000}}], 0x5, 0x10100, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)=ANY=[], 0x7) [ 1401.665042][ T8465] usb 1-1: USB disconnect, device number 15 12:38:08 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x0, @local}, 0x80, 0x0}, 0xfd00) 12:38:08 executing program 3: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001440)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b636e0e8b546a9b377294370890e0878fdb1ac6e7049b4cb4956c409a47085b67f3988f7ef31952a981ffe8d178708c523c921b1b454b0a169b71d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a483bf2aa74fc3357de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) getpid() gettid() [ 1402.490360][ T8465] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1402.770807][ T8465] usb 1-1: Using ep0 maxpacket: 8 [ 1402.890064][ T8465] usb 1-1: config index 0 descriptor too short (expected 61988, got 36) [ 1402.898564][ T8465] usb 1-1: config 0 has an invalid interface number: 67 but max is -1 [ 1402.907251][ T8465] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1402.916395][ T8465] usb 1-1: config 0 has no interface number 0 [ 1402.922717][ T8465] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1402.933820][ T8465] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1402.945010][ T8465] usb 1-1: config 0 interface 67 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1402.959497][ T8465] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1402.968993][ T8465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.994614][ T8465] usb 1-1: config 0 descriptor?? 12:38:09 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') 12:38:09 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x359, 0x0) 12:38:09 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:09 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x0, @local}, 0x80, 0x0}, 0xfd00) 12:38:09 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') 12:38:09 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="020000000000343418010000e730661384e6d421010000001f0000000000000000000002000000000200000000000000000200000500000002000000000000000d000000000000000000000000000000003a000000000000571b675f00000000581b675f00000000581b675f000000000100320001000100571b675f00000000004eed0000000000000000000b00000080002000c0001000987ac9a2b9f44ba19607c57b2e425e15", 0xa8, 0x400}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012a00)="d3cd4844093d7dea11faaf1e400007000000000000000000581b675f0000000000020000000000001c", 0x29, 0x6800}, {0x0, 0x0, 0xc000}, {0x0}, {0x0}], 0x0, &(0x7f0000016f00)=ANY=[@ANYBLOB]) [ 1403.303490][ T8714] usb 1-1: USB disconnect, device number 16 [ 1403.319594][ C0] xpad 1-1:0.67: xpad_irq_in - usb_submit_urb failed with result -19 12:38:10 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x0) [ 1403.604049][T28389] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1403.671742][T28389] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 2048) [ 1403.728931][T28389] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1403.737484][T28389] NILFS (loop3): unable to fall back to spare super block [ 1403.744869][T28389] NILFS (loop3): error -22 while searching super root 12:38:10 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) [ 1403.893025][T28389] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1403.904837][T28389] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 2048) [ 1403.960333][T28389] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1403.968459][T28389] NILFS (loop3): unable to fall back to spare super block [ 1403.976767][T28389] NILFS (loop3): error -22 while searching super root 12:38:10 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12:38:10 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x359, 0x0) 12:38:10 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) write$dsp(r0, &(0x7f0000000100)="83", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 12:38:11 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x0) 12:38:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000140), &(0x7f0000000280)=0xa0) 12:38:11 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x359, 0x0) 12:38:11 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$setstatus(r0, 0x4, 0x42000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3279]}, 0x8) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000000c0)=0x20000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) pipe2$9p(0x0, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440), 0xc, 0x0}, 0x4000800) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x80000) 12:38:11 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:11 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x0) 12:38:11 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="020000000000343418010000e730661384e6d421010000001f0000000000000000000002000000000200000000000000000200000500000002000000000000000d000000000000000000000000000000003a000000000000571b675f00000000581b675f00000000581b675f000000000100320001000100571b675f00000000004eed0000000000000000000b00000080002000c0001000987ac9a2b9f44ba19607c57b2e425e15", 0xa8, 0x400}, {0x0}, {0x0}, {&(0x7f0000012a00)="d3cd4844093d7dea11faaf1e400007000000000000000000581b675f0000000000020000000000001c", 0x29, 0x6800}, {0x0}, {0x0, 0x0, 0xc000}, {0x0}], 0x0, &(0x7f0000016f00)=ANY=[]) 12:38:11 executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x4, "d9762e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/173, 0xad) 12:38:12 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) 12:38:12 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x359, 0x0) [ 1405.643983][T28445] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1405.656157][T28445] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 2048) [ 1405.713457][T28445] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1405.722837][T28445] NILFS (loop2): unable to fall back to spare super block [ 1405.730458][T28445] NILFS (loop2): error -22 while searching super root 12:38:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 12:38:12 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) write$dsp(r0, &(0x7f0000000100)="83", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1406.017252][T28445] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1406.109175][ T8714] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1406.154291][T28445] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 2048) 12:38:13 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40047451, 0x20000000) [ 1406.376018][T28445] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1406.384549][T28445] NILFS (loop2): unable to fall back to spare super block [ 1406.391995][T28445] NILFS (loop2): error -22 while searching super root [ 1406.583740][ T8714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1406.594813][ T8714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1406.604844][ T8714] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1406.615768][ T8714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1406.627086][ T8714] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=12.7b [ 1406.637407][ T8714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:38:13 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x0, 0xfeffffff}, 0x80, 0x0}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x359, 0x0) 12:38:13 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x40) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000008c0)=0x7e4f) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1) 12:38:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x0) [ 1407.141120][ T8714] usb 1-1: config 0 descriptor?? [ 1407.412409][ T8714] ===================================================== [ 1407.412421][ T8714] BUG: KMSAN: uninit-value in number+0x8fc/0x25f0 [ 1407.412427][ T8714] CPU: 1 PID: 8714 Comm: kworker/1:6 Not tainted 5.10.0-rc4-syzkaller #0 [ 1407.412434][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.412451][ T8714] Workqueue: usb_hub_wq hub_event [ 1407.412460][ T8714] Call Trace: [ 1407.412464][ T8714] dump_stack+0x21c/0x280 [ 1407.412467][ T8714] kmsan_report+0xf7/0x1e0 [ 1407.412471][ T8714] __msan_warning+0x5f/0xa0 [ 1407.412474][ T8714] number+0x8fc/0x25f0 [ 1407.412479][ T8714] ? kmsan_internal_set_origin+0x85/0xc0 [ 1407.412483][ T8714] ? kmsan_get_metadata+0x111/0x180 [ 1407.412486][ T8714] vsnprintf+0x21f2/0x3610 [ 1407.412490][ T8714] pointer+0x1b8a/0x1ca0 [ 1407.412495][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412498][ T8714] vsnprintf+0x1a4f/0x3610 [ 1407.412502][ T8714] vscnprintf+0xbe/0x1c0 [ 1407.412506][ T8714] vprintk_store+0xff/0x14a0 [ 1407.412510][ T8714] ? kmsan_internal_set_origin+0x85/0xc0 [ 1407.412513][ T8714] vprintk_emit+0x2ae/0x820 [ 1407.412517][ T8714] dev_vprintk_emit+0x5f4/0x6d5 [ 1407.412521][ T8714] dev_printk_emit+0x1ce/0x210 [ 1407.412525][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412529][ T8714] __dev_printk+0x3e5/0x45f [ 1407.412532][ T8714] _dev_info+0x1e5/0x22a [ 1407.412536][ T8714] ? usb_control_msg_recv+0x5aa/0x5b0 [ 1407.412541][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412545][ T8714] tower_probe+0xf80/0x1210 [ 1407.412549][ T8714] ? ld_usb_interrupt_in_callback+0x920/0x920 [ 1407.412554][ T8714] usb_probe_interface+0xfcc/0x1520 [ 1407.412558][ T8714] ? usb_register_driver+0x900/0x900 [ 1407.412561][ T8714] really_probe+0xebd/0x2420 [ 1407.412566][ T8714] driver_probe_device+0x293/0x390 [ 1407.412569][ T8714] __device_attach_driver+0x63f/0x830 [ 1407.412573][ T8714] bus_for_each_drv+0x2ca/0x3f0 [ 1407.412578][ T8714] ? state_synced_show+0x130/0x130 [ 1407.412581][ T8714] __device_attach+0x538/0x860 [ 1407.412585][ T8714] device_initial_probe+0x4a/0x60 [ 1407.412589][ T8714] bus_probe_device+0x177/0x3d0 [ 1407.412593][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412596][ T8714] device_add+0x399e/0x3f20 [ 1407.412601][ T8714] usb_set_configuration+0x39cf/0x4010 [ 1407.412605][ T8714] ? usb_set_configuration+0xb11/0x4010 [ 1407.412608][ T8714] ? kmsan_report+0x1a0/0x1e0 [ 1407.412613][ T8714] usb_generic_driver_probe+0x138/0x300 [ 1407.412617][ T8714] ? usb_choose_configuration+0xf00/0xf00 [ 1407.412620][ T8714] usb_probe_device+0x317/0x570 [ 1407.412625][ T8714] ? usb_register_device_driver+0x590/0x590 [ 1407.412628][ T8714] really_probe+0xebd/0x2420 [ 1407.412632][ T8714] driver_probe_device+0x293/0x390 [ 1407.412636][ T8714] __device_attach_driver+0x63f/0x830 [ 1407.412640][ T8714] bus_for_each_drv+0x2ca/0x3f0 [ 1407.412644][ T8714] ? state_synced_show+0x130/0x130 [ 1407.412648][ T8714] __device_attach+0x538/0x860 [ 1407.412652][ T8714] device_initial_probe+0x4a/0x60 [ 1407.412655][ T8714] bus_probe_device+0x177/0x3d0 [ 1407.412660][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412663][ T8714] device_add+0x399e/0x3f20 [ 1407.412667][ T8714] usb_new_device+0x1bd6/0x2a30 [ 1407.412670][ T8714] hub_event+0x5bc9/0x8890 [ 1407.412675][ T8714] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1407.412679][ T8714] ? kmsan_get_metadata+0x116/0x180 [ 1407.412683][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412687][ T8714] ? led_work+0x780/0x780 [ 1407.412690][ T8714] process_one_work+0x121c/0x1fc0 [ 1407.412694][ T8714] worker_thread+0x10cc/0x2740 [ 1407.412698][ T8714] ? kmsan_get_metadata+0x116/0x180 [ 1407.412701][ T8714] kthread+0x51c/0x560 [ 1407.412705][ T8714] ? process_one_work+0x1fc0/0x1fc0 [ 1407.412709][ T8714] ? kthread_blkcg+0x110/0x110 [ 1407.412712][ T8714] ret_from_fork+0x1f/0x30 [ 1407.412714][ T8714] [ 1407.412720][ T8714] Local variable ----get_version_reply@tower_probe created at: [ 1407.412724][ T8714] tower_probe+0x87/0x1210 [ 1407.412727][ T8714] tower_probe+0x87/0x1210 [ 1407.412733][ T8714] ===================================================== [ 1407.412737][ T8714] Disabling lock debugging due to kernel taint [ 1407.412742][ T8714] Kernel panic - not syncing: panic_on_warn set ... [ 1407.412749][ T8714] CPU: 1 PID: 8714 Comm: kworker/1:6 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 1407.412756][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.412759][ T8714] Workqueue: usb_hub_wq hub_event [ 1407.412764][ T8714] Call Trace: [ 1407.412768][ T8714] dump_stack+0x21c/0x280 [ 1407.412771][ T8714] panic+0x4c8/0xea7 [ 1407.412774][ T8714] ? add_taint+0x17c/0x210 [ 1407.412778][ T8714] ? vsnprintf+0x325/0x3610 [ 1407.412782][ T8714] kmsan_report+0x1da/0x1e0 [ 1407.412785][ T8714] __msan_warning+0x5f/0xa0 [ 1407.412788][ T8714] number+0x8fc/0x25f0 [ 1407.412793][ T8714] ? kmsan_internal_set_origin+0x85/0xc0 [ 1407.412797][ T8714] ? kmsan_get_metadata+0x111/0x180 [ 1407.412800][ T8714] vsnprintf+0x21f2/0x3610 [ 1407.412803][ T8714] pointer+0x1b8a/0x1ca0 [ 1407.412808][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412811][ T8714] vsnprintf+0x1a4f/0x3610 [ 1407.412814][ T8714] vscnprintf+0xbe/0x1c0 [ 1407.412819][ T8714] vprintk_store+0xff/0x14a0 [ 1407.412823][ T8714] ? kmsan_internal_set_origin+0x85/0xc0 [ 1407.412827][ T8714] vprintk_emit+0x2ae/0x820 [ 1407.412831][ T8714] dev_vprintk_emit+0x5f4/0x6d5 [ 1407.412835][ T8714] dev_printk_emit+0x1ce/0x210 [ 1407.412839][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412843][ T8714] __dev_printk+0x3e5/0x45f [ 1407.412846][ T8714] _dev_info+0x1e5/0x22a [ 1407.412850][ T8714] ? usb_control_msg_recv+0x5aa/0x5b0 [ 1407.412854][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412858][ T8714] tower_probe+0xf80/0x1210 [ 1407.412862][ T8714] ? ld_usb_interrupt_in_callback+0x920/0x920 [ 1407.412866][ T8714] usb_probe_interface+0xfcc/0x1520 [ 1407.412870][ T8714] ? usb_register_driver+0x900/0x900 [ 1407.412874][ T8714] really_probe+0xebd/0x2420 [ 1407.412877][ T8714] driver_probe_device+0x293/0x390 [ 1407.412881][ T8714] __device_attach_driver+0x63f/0x830 [ 1407.412884][ T8714] bus_for_each_drv+0x2ca/0x3f0 [ 1407.412888][ T8714] ? state_synced_show+0x130/0x130 [ 1407.412892][ T8714] __device_attach+0x538/0x860 [ 1407.412895][ T8714] device_initial_probe+0x4a/0x60 [ 1407.412899][ T8714] bus_probe_device+0x177/0x3d0 [ 1407.412903][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412906][ T8714] device_add+0x399e/0x3f20 [ 1407.412910][ T8714] usb_set_configuration+0x39cf/0x4010 [ 1407.412914][ T8714] ? usb_set_configuration+0xb11/0x4010 [ 1407.412917][ T8714] ? kmsan_report+0x1a0/0x1e0 [ 1407.412921][ T8714] usb_generic_driver_probe+0x138/0x300 [ 1407.412925][ T8714] ? usb_choose_configuration+0xf00/0xf00 [ 1407.412929][ T8714] usb_probe_device+0x317/0x570 [ 1407.412933][ T8714] ? usb_register_device_driver+0x590/0x590 [ 1407.412936][ T8714] really_probe+0xebd/0x2420 [ 1407.412940][ T8714] driver_probe_device+0x293/0x390 [ 1407.412944][ T8714] __device_attach_driver+0x63f/0x830 [ 1407.412947][ T8714] bus_for_each_drv+0x2ca/0x3f0 [ 1407.412951][ T8714] ? state_synced_show+0x130/0x130 [ 1407.412954][ T8714] __device_attach+0x538/0x860 [ 1407.412958][ T8714] device_initial_probe+0x4a/0x60 [ 1407.412961][ T8714] bus_probe_device+0x177/0x3d0 [ 1407.412965][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412969][ T8714] device_add+0x399e/0x3f20 [ 1407.412972][ T8714] usb_new_device+0x1bd6/0x2a30 [ 1407.412976][ T8714] hub_event+0x5bc9/0x8890 [ 1407.412980][ T8714] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1407.412983][ T8714] ? kmsan_get_metadata+0x116/0x180 [ 1407.412987][ T8714] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1407.412991][ T8714] ? led_work+0x780/0x780 [ 1407.412994][ T8714] process_one_work+0x121c/0x1fc0 [ 1407.412998][ T8714] worker_thread+0x10cc/0x2740 [ 1407.413002][ T8714] ? kmsan_get_metadata+0x116/0x180 [ 1407.413005][ T8714] kthread+0x51c/0x560 [ 1407.413008][ T8714] ? process_one_work+0x1fc0/0x1fc0 [ 1407.413012][ T8714] ? kthread_blkcg+0x110/0x110 [ 1407.413015][ T8714] ret_from_fork+0x1f/0x30 [ 1407.413018][ T8714] Kernel Offset: disabled