80)="0800b5055e0bcfe87b2071") 23:59:19 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000200007021dfffd946f6105000a0000f71e5bda5a9500000000000800080018000400ff7e6b53a6ddc9b8c1dc5bae7c1de449201a50d69d951a66142889a7cff6722ecc19954d5637be5e59eb859ea950e39a41503d0d368c901b04fd14d98932f5f59c46e1ddbc30dd5e34e2c31b79b64eec48167dd989e394a225c31712ef90ee8b484ff9d24d444586835432058eb134de36dd2bfd21d9556d", 0x9e}], 0x1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000180)={0x0, {0xc0000000, 0x2000000}}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x1ff, 0x4) [ 724.660371][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 724.765158][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:59:20 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f00000000000800080018000400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x8, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffd80, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bcsh0\x00', r6}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$alg(0x26, 0x5, 0x0) open_by_handle_at(r10, &(0x7f0000000700)={0x1008, 0x6, "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"}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r11, r12}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@local, 0x4e20, 0x2, 0x4e20, 0xffc0, 0x0, 0x20, 0x80, 0x0, r7, r12}, {0x2, 0x1, 0x0, 0x3f, 0x7, 0x3, 0x40, 0xffff}, {0x7, 0xe94, 0x1, 0x9}, 0xffff00ff, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d6, 0xff}, 0xf978662c1153959f, @in6=@dev={0xfe, 0x80, [], 0x1c}, 0x3507, 0x4, 0x1, 0x1f, 0x6, 0x5, 0x20}}, 0xe8) 23:59:20 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:20 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000000)={0x7, "8fa33abd9be63fa0ad574fde0e1fe728a3bdd3ff63f0b47ac2c97bd0ebf94a3f", 0x4, 0xffffffe1, 0x2, 0x10, 0x4}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 725.194289][T22580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.367186][T22584] IPVS: ftp: loaded support on port[0] = 21 [ 725.452081][T22580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.537157][T22592] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:23 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000016008105e00f80ecdb4cb92e0a00022c14000000160002008e2548f328995a017c7b5851690fdbdc01ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 23:59:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) nanosleep(&(0x7f00000007c0), 0x0) accept$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x1d) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x21}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1030}, {&(0x7f0000000400)=""/118, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0xf03dbcf4f164e1, 0x6, &(0x7f0000003700)={0x77359400}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000780)={r4, 0xeab9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000700)={0x7fff, 0x8202, 0x5, 0x1, r5}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x7140db3952ecd84a, 0x9, {0x9, 0x21, 0x8000, 0x8e, 0x1, {0x22, 0x986}}, {{{0x9, 0x5, 0x81, 0x3, 0x55, 0x47, 0x1, 0x8}}}}}]}}]}}, &(0x7f0000000300)={0xfcea, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x8, 0xd1, 0x4, 0x10, 0x6}, 0x32, &(0x7f0000000800)={0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x4, 0xc287, 0x5}, @ptm_cap={0x3}, @wireless={0x0, 0x10, 0x1, 0x4, 0xe2, 0xe0, 0x1, 0x23a5, 0x2}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}]}) 23:59:23 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f00000000000800080018000400ff7e", 0x24}], 0x1}, 0x4005000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) sendto$inet6(r1, &(0x7f0000000380)="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", 0x1000, 0x4000000, 0x0, 0x0) 23:59:23 executing program 5: r0 = getpid() r1 = getpid() setpgid(r0, r1) 23:59:23 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:23 executing program 1: write(0xffffffffffffffff, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) close(r0) socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x8001, @local, 0x9}}, 0x0, 0xfff, 0x0, "53180ea1cfdebbe2024bf800dcbe7ee0cd516d29a1cf214148d7d6a86950fb117bce84e2414cd367efefc5f3b73545add5318e75cc471a0f4eeb65ebd9870bd7ad47352574d824a5103cb810086596c9"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0xc0045878, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0xc0045878, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000001c0)={r8, 0x22, "6cadf499db2f0f237def9249951ffa4c7ba8381da8ca6e93b0256328acefb774d275"}, &(0x7f0000000200)=0x2a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r9, 0x401, 0x8}, &(0x7f00000002c0)=0xc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 23:59:23 executing program 4: socket$inet(0x10, 0x3, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0045878, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xfffffc73, &(0x7f0000000640), 0x1, 0x0, 0x201}, 0x0) [ 728.612430][T22604] IPVS: ftp: loaded support on port[0] = 21 23:59:23 executing program 5: r0 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\xbapI\xd4_\xa5A:\x97n\xe5\xeb\xdf\xc9\xf5t\x0fEpp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) [ 728.982211][T19706] usb 3-1: new full-speed USB device number 18 using dummy_hcd 23:59:24 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 23:59:24 executing program 4: r0 = socket$inet(0x10, 0x804, 0x74) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f00000000000800080018000400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101000, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) getpeername(r2, &(0x7f0000000400)=@xdp, &(0x7f0000000480)=0x80) getpeername$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = shmget$private(0x0, 0x8000, 0x0, &(0x7f0000ff8000/0x8000)=nil) shmat(r4, &(0x7f0000fee000/0x2000)=nil, 0x5000) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000001c0)=""/248) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000380)={{r5, r6/1000+30000}, {r7, r8/1000+30000}}, &(0x7f00000003c0)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) 23:59:24 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:24 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="a53adec77662", @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@lsrr={0x83, 0x3, 0x8}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7cb4b5", 0x0, "08fae2"}}}}}}, 0x0) [ 729.345728][T19706] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 85, setting to 64 [ 729.349962][T22632] IPVS: ftp: loaded support on port[0] = 21 [ 729.356864][T19706] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.376170][T19706] usb 3-1: config 1 interface 0 has no altsetting 0 [ 729.595111][T19706] usb 3-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 729.604335][T19706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.612535][T19706] usb 3-1: Product: syz [ 729.616770][T19706] usb 3-1: Manufacturer: ဌ [ 729.621433][T19706] usb 3-1: SerialNumber: syz [ 730.102232][T19706] usbhid 3-1:1.0: can't add hid device: -71 [ 730.108475][T19706] usbhid: probe of 3-1:1.0 failed with error -71 [ 730.117077][T19706] usb 3-1: USB disconnect, device number 18 [ 730.682008][T12130] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 731.042088][T12130] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 85, setting to 64 [ 731.053741][T12130] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.066886][T12130] usb 3-1: config 1 interface 0 has no altsetting 0 [ 731.242490][T12130] usb 3-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 731.251648][T12130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.259877][T12130] usb 3-1: Product: syz [ 731.264190][T12130] usb 3-1: Manufacturer: ဌ [ 731.268805][T12130] usb 3-1: SerialNumber: syz [ 731.742212][T12130] usbhid 3-1:1.0: can't add hid device: -71 [ 731.748412][T12130] usbhid: probe of 3-1:1.0 failed with error -71 [ 731.759168][T12130] usb 3-1: USB disconnect, device number 19 23:59:29 executing program 0: 23:59:29 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x5) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa4840, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)=0x5) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000040)=0x5) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x8, 0x100000000, 0x8, 0x0, 0x0, [{r1, 0x0, 0x6}, {r2, 0x0, 0x3f}, {r0, 0x0, 0x6}, {r0, 0x0, 0x4}, {r3}, {r4, 0x0, 0x80000001}, {r5, 0x0, 0x40}, {r6, 0x0, 0xff}]}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f00000000000800080018000400ff7e", 0x24}], 0x1}, 0x0) 23:59:29 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0xcc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000380)={0x519, "34b92ca0ced0a44aa05c91f9e444ec5e5aacb7668e841824ed33f4fee4f1485a594f168536ff3f1145b40376a0180ed908503ea36fa17b5ca0b62ad85561b23cb6be690e26b1eb70ad19224fd68a282fbd4bd0451cf33be7e1b6d6d387ba2a7c36c1f7d363461124a1ad8816ac8254bed29cfab2650c5047f819263b1d91355912fd57ed0907f94f08c29ace45cad8b9c2cb57817abcf82b4be9e8430cce973efb4a2568e29982feeec34866a1125a471a1e92962830682f63efd85c64c3ba0050f131d43a6596751542cf828a4bc36c083e1ee9d4e6ce2ceecdbf2207bae3feb8e40e192203ff5c0a371aeeec51c423b6fcb80e088c336182fcc47d9c08e909fb527ca940c680e276aeea913d6c6400444ad0ae2b13f528b5be78f3f2a91a37f240519c9d53fa997039893a80ee36369628fab05ce4d707c7007203b448bd73928029c7ffca61d766e14a05196eb8c8d1a71fb29218bf1fb072ee7fafacbfe96a7ff61f1f3bceca18a9c0c4c31038e7cfcc8c516f55940b31714f63bed029a4b2e4d9040dbfe32ed803e05947c0c3ee44375ce6e9b92cd2c2e174ebb4863b643eba8ba343681cb063cc4bad1bbb49b95464fc4309e70a999cedb9f621cea1e7a2b9bcda8585231cc925dd474e189c04e40c0562e7ed4d9529dd5f23d4029ded9e3acf80bd877ab2c2840f535d228a1d157502240e87aa7ba7d2d394ada0e9eb8b0cb2d5d8c916602165fc9448be7496fd952dacb964447074c043098c8ae70c3961f29b1cbec31b8cdd6a68aa667b8f61f72a02963929d2fbba1dd0d024feb56f3aa32f4ef95d66d2483c1537500a5dac25b5535426702aa35a3412c5f938ed81fe47ed823762607c426cd3c49c0b1a9621e585a3385fbbfe0ca8a4b50b6a9137e652c250af66d9bf35e8f07ccdaa31f4f18749a5891b84e502dc36bafafc79adae458297d42adaece5314a75ddb6f9af0e00a7967f50fd66399fd36745387f7b4c37608a1a0bac4624036679768d73839d6b21e6d5cd1b35ef61fad88472ae023cf90f6ae13d5657c4aba4eeadbc5fb8f5bc493cb5b3c69babc81c21f46085673bdee4be9085983eef3875a708e7040a1ea2db0540f97a4ff9c1615802bfc5872e69671250d959b24342cd5550f6f04b574bc681eaeab1e94b0072228e6534736f104d069595340a16a909229548b5b12749abbb825ae06296c5d91d205906af29cff619d508e7d88eec717e2afa7c3852ad72007860181ef4355f7cded3fd5ae7be83d99dd2d0f588462993ec4201ba3196aea627b62dda32389c3839403cb21eb88714066182662f07f6a573c3ce20cc60d89a56f4db4dda64e1f735c72078a62e20e2654968a726fe63e39f2d074b079da7b51e253d1d9688c237a31a40575da178e1ca04a51f1648a9ba9b73b7e55e22e2c996b30038ccaf602b2a11fb1a4499ffb258661692e758e3d76aaeb5ea637ee7cbc8292285f7e6594349ef8abdc6f82760295dc2a02c411079f406a3d18d9150555fe50336126717d0f23e952a1ad7094efc9dad36f89e5d94adab7baa75941ed4b0103d06ddaa57a90b81d4c164fc2174d2e27b455f2b0d9792b6579bddd6885a5d457da81c9778fc663734dd2aedca31c393ecf6885ddfc5f86e35f485ea54bc0370cd8a1258174d92a2b13c5e60e5a7038e887516476fed4397ed6267720cad853104dd9a42cdefdd6144cd68b9e310fdb7701db9ad287e024f5d425e2cd2584221487450cab46f4e3164ee9dc9ee561cf8e4720586048fe1d40f31dfa64701fd4fe9a8fc4c03a4b71520662be0b9b7f3719fe56917253ee123c1091bec307e0256cc4f"}) close(r2) socket(0x10, 0x3, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0xc0045878, 0x0) r5 = gettid() ptrace(0x4206, r5) tkill(r5, 0x9) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000080)=r5) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:59:29 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 23:59:29 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:29 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="080016000000000000000000000000000000011912000000b1ad74008760e412000000abc3"]}) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="260000001000f5680300c10100de96ab8d55ca381000000000ba00000000e13a06000300", 0x24) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:59:30 executing program 2: 23:59:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="050000000000000071100c000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4, 0x10, &(0x7f0000000000), 0x4}, 0x14) [ 735.002472][T22652] IPVS: ftp: loaded support on port[0] = 21 23:59:30 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 23:59:30 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x80000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f0000000380)=""/207, 0xd16a}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0xc0045878, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e20, 0x80000001, @ipv4={[], [], @broadcast}, 0x2b}, r6}}, 0x38) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x5) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x240, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 23:59:30 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x9) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x30) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) r3 = getpid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x80000000, 0x3, 0x4145, 0x40, r3}) r4 = accept$inet(r0, 0x0, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r8, r9}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @loopback}, @in=@empty, 0x4e21, 0x93d9, 0x4e21, 0x0, 0x2, 0x20, 0xc0, 0x4, r5, r9}, {0x1f8000, 0x6, 0x9, 0x2410, 0x5, 0x1000, 0x7, 0x80}, {0x0, 0x0, 0x7ff, 0x8}, 0x7f, 0x6e6bc0, 0x2, 0x0, 0x4, 0x5de1749caae78baf}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in6=@local, 0x3504, 0x0, 0x5, 0x7, 0x1f, 0x1, 0x7}}, 0xe8) 23:59:30 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000900)="f4d92b0f8ba18c48876de5212bdb1973b135f872351d52ebf6882c45171c9fea7df6d6723bc77b35266ea96ffc116bb00bd550fd3bc121692c99ce29c7819dbc4088cc41699ef95c60db31d9e95c65d77181ddbd25848f1a86f18a72e9571f3e16e3c6c0e2513c2a9ead4573433ac5dd746a8cf2782c896925ab113d0454ae531869d245db2182f6e6446fbe1819478f4e5fe17c2dfe9c556acd0981f231020c78fb8743c6ce0bf424d73403571e4d7329a17af5a8a318e2eca778004459c731440cb3036ccbbba77f955905a377c05c5b225ab0e77f434ceac2a1302c43d05db8d127080b5698e1d6a7d77b7b408afaf98e2c81bafcc5b1b883252cbada8036cb9e38932d922e7a17f05c79d739d52fa06c39dc95ddaa68685a0fe0137473a7b8f4dd5bcca48e95528d1435a3648c42445896b3163f4123bd1cc8c9a36048bafcc7d013a0b166898fefc0ce911b372d3d403fa8d557673bddf71daa26b93da1ec9bd4773a3da6be6c10dfed0f002f84b380037a8cf437577f5da60fba769dfca914556bc031b35be9fe79d5565ea20284aed1c81c5cb0b3b35f5a629fb84f6840162c55597a5644f091181df52f53a14bfd5234fbd92e88cc40326ccd25f1e3a6c56a86eb70e0472276595d88f74055c3fea7377c3a71a9607f7b5cbd7dd0f2d272a39ed40d27d582a9bf0711d632f27f227db0d57b16a5a3477f15dd102d8b488fdd7686af05fd942586c68a1acccd377a274477271229f9bbd731752d9f149a10d3d4585f242d850cf3d6214ae4cfb2cb7ebcdf4b50e2ba68dc61a31063b953cc77e96425b28fbf1a52ed588b0612871d2250fcad7fdd25ab44bd475d472c06694fcb49629feea8c21848863f2ceed6e50e0a948d299c469955f609afebad7a8af33e4208295dc629cca2212526a9d1fa12902ce19adff5b7274057f31be38a50ef3b6715b9108ee43943be048fc0ea1dd351dae995dd357a030274146d698511bd35853703cd3612b476a79302654e33b7e3b375d905f333b45db2364b59bf96438358fe3158eecf3e9375050d1e51b3efd19d706291a38c2ab23913e2aaee0665437fe0703a7dd84bd7332a84562cc38585199f92f1a40d26ca20514c11daeb7d930f33ce92bf53c07aa83589fb37f4c1ba549cac0eef273c1f1af1a79ca0d9d38912772d278992e357a12d0b5d477f4d31e52ad76a12e5460cc7d9c2d2b0c0b04fe22a2897cd82241bf71c8de8983f46e5a8f4ca0749b8a32cbdf9e6e4e3b441dbae23227b2a5acef95b95f23005113d097e842ce77a8ff2700369e02370a10db242936b29cfb685b95c8e205923caf8c592cf509607ac8f5ffcfba57b5cbe950e8f80a701ee14681303a49921ea898c4a2abd8f832bdc216fec448fac7aa39e781466d0c2036c090bbc5539cf07905e60e009b2e5b84831dd4bc56d4e357e09494cf3b45323bba920e28cb52ea8413b601dae693c7baf4519fc250e2b1c974970f6f9e7b468fe6bafc161a70f0f8222face80dc2e113baf7df879285c6eda9396c87b712eb8af2e4ef64ce426be1d8aa905281dd06e08a7c168cfb854ec24f5d4e1ea276c9098acd02694a7f94dd7042877f5542152a4b49a48973127f96b149e44cd214f143c8fc476a1c899b061702026fe05dde406bb710abf4e45fc7dfba22f3013eb01cd7c4bfc0a7c674192f20a60c27091d51373cc16a4bb27c27295422832bdf95920f5159f29ea7c616bc82a9bb81ded9a440a71c3ef5114abddc7cf53531b55adf87f429413ee61a78c33cb59ae46c57a2bad60ffd738c31ff7ccc675991941caf28bf0e1da86576c09d0e332e1d1e9cd27be1e3550f63b3f6576c197217c9f4e3025ecacff8b5c5ed47afde6cfffdae81c5b1de60cba66a552057bf900d9cafe50ce248305987a105dab30062b0d14bae3626762d9f6d22d23610a8a75639aa9b9e0dbecec26e51771aa0f7473dccc7ab762cd2272a581e5ca6b135b46871375131f5cd0d292681cbb26693af0dc1076515ca9b51e3d697283eb839854258f6fc85e5d9f161c96c54aaee1cd069b26d147d94324bedc2c28", 0x5c1}], 0x1) 23:59:34 executing program 0: 23:59:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xaa, 0x0) 23:59:34 executing program 4: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:59:34 executing program 5: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="82022e2fac1400ff7d81afe46d5733e0f29384d0829696473d48e4c734a899f96f0b224ec765ed0e76d93c6b8a03b10820a58fe43bea7a07246ebf798f5ad2d9ac55a52f7dc8062782813c8cefcffb59b21adb1bd4f9c0e36d58ab4f79a66de7fb584d490000007c62f547d55587267ba5050932ed612e5ffe04ed83800b0331dd48d6fdc2ef47b4d2c38f572cf51ad724dd92f008c18dacb6584b976198a9ebe91b7ebb57e75bb2dc6657ddac47a47e1d36a82818af28ea997e3ea944df0430b67f055df2b473f9c2f7a5daa530239fc1ecc440000447c89263b7abec43beaf656f9362301576534c2d7ceac6f705d4729f7c40b3dffccd0e67beab3b00b0c1b705f6b4300048c4c0db6c55a02805961e2dcdfadb9edd8a568f564b4d217824b0aa5560ea147f1bd941f986fc40017f2f064b23f1e1692c35dbdc77d3f79c942baa127a4dc3f33d4fcd03af0c9fc348ee4013ecdb22c56ebed7f9a464a99d6c3105c25a830000e42edb2e8701af93d265d15a0ee0f3e060a46edcb9a342bafee9139645637b89c81feba0f40c08c3a959b47fa6ef021fee27df442b4540f4a1124b9bf779945601f6fa7eca47765e186bc740e6ee66469e492f519cb98a6a4636ede6b3befa278e0e5a7ebee8a3b9784d199bb73540e4"], 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000900)="f4d92b0f8ba18c48876de5212bdb1973b135f872351d52ebf6882c45171c9fea7df6d6723bc77b35266ea96ffc116bb00bd550fd3bc121692c99ce29c7819dbc4088cc41699ef95c60db31d9e95c65d77181ddbd25848f1a86f18a72e9571f3e16e3c6c0e2513c2a9ead4573433ac5dd746a8cf2782c896925ab113d0454ae531869d245db2182f6e6446fbe1819478f4e5fe17c2dfe9c556acd0981f231020c78fb8743c6ce0bf424d73403571e4d7329a17af5a8a318e2eca778004459c731440cb3036ccbbba77f955905a377c05c5b225ab0e77f434ceac2a1302c43d05db8d127080b5698e1d6a7d77b7b408afaf98e2c81bafcc5b1b883252cbada8036cb9e38932d922e7a17f05c79d739d52fa06c39dc95ddaa68685a0fe0137473a7b8f4dd5bcca48e95528d1435a3648c42445896b3163f4123bd1cc8c9a36048bafcc7d013a0b166898fefc0ce911b372d3d403fa8d557673bddf71daa26b93da1ec9bd4773a3da6be6c10dfed0f002f84b380037a8cf437577f5da60fba769dfca914556bc031b35be9fe79d5565ea20284aed1c81c5cb0b3b35f5a629fb84f6840162c55597a5644f091181df52f53a14bfd5234fbd92e88cc40326ccd25f1e3a6c56a86eb70e0472276595d88f74055c3fea7377c3a71a9607f7b5cbd7dd0f2d272a39ed40d27d582a9bf0711d632f27f227db0d57b16a5a3477f15dd102d8b488fdd7686af05fd942586c68a1acccd377a274477271229f9bbd731752d9f149a10d3d4585f242d850cf3d6214ae4cfb2cb7ebcdf4b50e2ba68dc61a31063b953cc77e96425b28fbf1a52ed588b0612871d2250fcad7fdd25ab44bd475d472c06694fcb49629feea8c21848863f2ceed6e50e0a948d299c469955f609afebad7a8af33e4208295dc629cca2212526a9d1fa12902ce19adff5b7274057f31be38a50ef3b6715b9108ee43943be048fc0ea1dd351dae995dd357a030274146d698511bd35853703cd3612b476a79302654e33b7e3b375d905f333b45db2364b59bf96438358fe3158eecf3e9375050d1e51b3efd19d706291a38c2ab23913e2aaee0665437fe0703a7dd84bd7332a84562cc38585199f92f1a40d26ca20514c11daeb7d930f33ce92bf53c07aa83589fb37f4c1ba549cac0eef273c1f1af1a79ca0d9d38912772d278992e357a12d0b5d477f4d31e52ad76a12e5460cc7d9c2d2b0c0b04fe22a2897cd82241bf71c8de8983f46e5a8f4ca0749b8a32cbdf9e6e4e3b441dbae23227b2a5acef95b95f23005113d097e842ce77a8ff2700369e02370a10db242936b29cfb685b95c8e205923caf8c592cf509607ac8f5ffcfba57b5cbe950e8f80a701ee14681303a49921ea898c4a2abd8f832bdc216fec448fac7aa39e781466d0c2036c090bbc5539cf07905e60e009b2e5b84831dd4bc56d4e357e09494cf3b45323bba920e28cb52ea8413b601dae693c7baf4519fc250e2b1c974970f6f9e7b468fe6bafc161a70f0f8222face80dc2e113baf7df879285c6eda9396c87b712eb8af2e4ef64ce426be1d8aa905281dd06e08a7c168cfb854ec24f5d4e1ea276c9098acd02694a7f94dd7042877f5542152a4b49a48973127f96b149e44cd214f143c8fc476a1c899b061702026fe05dde406bb710abf4e45fc7dfba22f3013eb01cd7c4bfc0a7c674192f20a60c27091d51373cc16a4bb27c27295422832bdf95920f5159f29ea7c616bc82a9bb81ded9a440a71c3ef5114abddc7cf53531b55adf87f429413ee61a78c33cb59ae46c57a2bad60ffd738c31ff7ccc675991941caf28bf0e1da86576c09d0e332e1d1e9cd27be1e3550f63b3f6576c197217c9f4e3025ecacff8b5c5ed47afde6cfffdae81c5b1de60cba66a552057bf900d9cafe50ce248305987a105dab30062b0d14bae3626762d9f6d22d23610a8a75639aa9b9e0dbecec26e51771aa0f7473dccc7ab762cd2272a581e5ca6b135b46871375131f5cd0d292681cbb26693af0dc1076515ca9b51e3d697283eb839854258f6fc85e5d9f161c96c54aaee1cd069b26d147d94324bedc2c28", 0x5c1}], 0x1) 23:59:34 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:34 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) splice(r0, 0x0, r5, 0x0, 0x81, 0x0) 23:59:34 executing program 2: 23:59:34 executing program 5: [ 739.177366][T22682] IPVS: ftp: loaded support on port[0] = 21 23:59:34 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="47419aec2fd6a79d67e3ae1ec1", 0xd}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000040)="485055417d35d94e12a2bcf9d13c559213cb2e92019dc2742bbe855120dda15b4155922153bc7918e5b6c722a14e8693b44cf924d7f94a36657f913dc4935e1cb38f9c051d4a5055d3a760895b84c2ea6cb9e041ca7ae46702fd5fe5d490d373904626f97c356fa93e22458c82cd12e991e575141b06cd78eec63ccf1e4bd0cc5a0511ff0ff9f8d49a0d952638fa611dfadc646ffd05543d1af7259e874d6c11d56ebd0dc1a727bacea9adcd783887bf578de572d8773c04882c5f929a603c559c35415384f198035d54d73e2ac96fb7d7d74ba3b7920d143e0f83", 0xdb}], 0x3) socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0xc0045878, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x7f5946e0c5a0f47c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r6, 0x901, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd3ec}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x8880) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:59:34 executing program 2: 23:59:34 executing program 5: [ 739.499131][T12185] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 739.538806][T22704] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:34 executing program 2: [ 739.744600][T12185] usb 5-1: Using ep0 maxpacket: 32 [ 739.863035][T12185] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 739.871307][T12185] usb 5-1: config 0 has no interface number 0 [ 739.877914][T12185] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 739.887085][T12185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.897501][T12185] usb 5-1: config 0 descriptor?? [ 740.602272][T12185] CoreChips 5-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 741.902030][T12185] CoreChips 5-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 741.913061][T12185] CoreChips 5-1:0.159 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 741.923250][T12185] CoreChips: probe of 5-1:0.159 failed with error -71 [ 741.934688][T12185] usb 5-1: USB disconnect, device number 16 [ 742.351940][T12185] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 742.591966][T12185] usb 5-1: Using ep0 maxpacket: 32 [ 742.722256][T12185] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 742.730605][T12185] usb 5-1: config 0 has no interface number 0 [ 742.736942][T12185] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 742.746085][T12185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.755580][T12185] usb 5-1: config 0 descriptor?? [ 742.982733][T12185] CoreChips 5-1:0.159 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 742.992631][T12185] CoreChips: probe of 5-1:0.159 failed with error -71 [ 743.004725][T12185] usb 5-1: USB disconnect, device number 17 23:59:38 executing program 0: 23:59:38 executing program 5: 23:59:38 executing program 2: 23:59:38 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:38 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) fcntl$setpipe(r2, 0x407, 0x7) close(r1) socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$packet(0x11, 0x0, 0x300) splice(r5, 0x0, r0, 0x0, 0x4ffe0, 0x0) 23:59:38 executing program 4: 23:59:38 executing program 5: 23:59:38 executing program 4: [ 743.391646][T22715] IPVS: ftp: loaded support on port[0] = 21 23:59:38 executing program 2: 23:59:38 executing program 2: 23:59:38 executing program 5: 23:59:38 executing program 4: 23:59:42 executing program 0: 23:59:42 executing program 5: 23:59:42 executing program 2: 23:59:42 executing program 4: 23:59:42 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:42 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC]], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) 23:59:42 executing program 5: 23:59:42 executing program 5: 23:59:42 executing program 4: [ 747.530709][T22737] IPVS: ftp: loaded support on port[0] = 21 23:59:42 executing program 2: [ 747.587989][T22740] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:42 executing program 2: 23:59:42 executing program 5: 23:59:46 executing program 0: 23:59:46 executing program 4: 23:59:46 executing program 2: 23:59:46 executing program 5: 23:59:46 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:46 executing program 1: 23:59:46 executing program 4: 23:59:46 executing program 5: 23:59:46 executing program 1: 23:59:46 executing program 2: [ 751.705462][T22755] IPVS: ftp: loaded support on port[0] = 21 23:59:46 executing program 1: 23:59:46 executing program 2: 23:59:50 executing program 0: 23:59:50 executing program 5: 23:59:50 executing program 4: 23:59:50 executing program 2: 23:59:50 executing program 1: 23:59:50 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:51 executing program 2: 23:59:51 executing program 4: 23:59:51 executing program 1: 23:59:51 executing program 5: [ 755.921452][T22772] IPVS: ftp: loaded support on port[0] = 21 23:59:51 executing program 5: 23:59:51 executing program 1: 23:59:54 executing program 0: r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000000300)="65c9f266326fc4350123eda1df9ec6c2e1835ebd099c4b0e9f1d9dd2bb5593280eb116e498be4aa0bfa163b1a8c1de6fb8ed6c70a8a20ecc5044994b7cb40bc6060e160fa6f87bfaff9d646192312abf1c349e75b7e3a234f09fd7eea9923a4a395d56b091a287b61fe2ad16762a75a6a3c86f213345a9f286f1c2316f0ed7c99774c554e25e1542d0a6cc509b891e3e17900bdc8189142d4dd7ee233ca6f74dc04059f61190d2", 0xa7}, {&(0x7f00000003c0)="a6b971ed49c02839e13997e8bad54eaa185d9728518e6abd8873b11a67f3892f9d1a4d3819c74c702afba4e8d4e78afd991a105be9e993d9127a45f5a5cc2712d5e841d665352f1db863a3991005dd1b4c7b15dbe0209a453836c418fba299e57a1c87dc2bf7a1cf5c3cfb4b0ba939", 0x6f}, {&(0x7f00000004c0)="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", 0x667}], 0x4) semctl$SETALL(0x0, 0x0, 0x9, 0x0) 23:59:54 executing program 2: 23:59:54 executing program 4: 23:59:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 23:59:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x2ca) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x72516111, 0x100, &(0x7f0000001880), 0xffffff97) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)="872a", 0x2, 0x0, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 23:59:54 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:55 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:55 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 759.984778][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 760.113841][T22797] IPVS: ftp: loaded support on port[0] = 21 [ 760.200304][T22804] IPVS: ftp: loaded support on port[0] = 21 [ 760.281871][T22806] IPVS: ftp: loaded support on port[0] = 21 23:59:55 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 760.628754][T22815] IPVS: ftp: loaded support on port[0] = 21 23:59:56 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 761.237626][T22824] IPVS: ftp: loaded support on port[0] = 21 23:59:56 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:56 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 761.600104][T22829] IPVS: ftp: loaded support on port[0] = 21 [ 761.694372][T22831] IPVS: ftp: loaded support on port[0] = 21 23:59:59 executing program 0: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f00000000000800080018000400ff7e", 0x24}], 0x1}, 0x0) 23:59:59 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:59 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:59 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:59 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 23:59:59 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x0, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 764.239219][T22842] IPVS: ftp: loaded support on port[0] = 21 [ 764.244390][T22844] IPVS: ftp: loaded support on port[0] = 21 [ 764.374031][T22849] IPVS: ftp: loaded support on port[0] = 21 [ 764.403650][T22846] IPVS: ftp: loaded support on port[0] = 21 [ 764.562655][T22848] IPVS: ftp: loaded support on port[0] = 21 00:00:00 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x0, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:00 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:00 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 765.204164][T22863] IPVS: ftp: loaded support on port[0] = 21 [ 765.319810][T22865] IPVS: ftp: loaded support on port[0] = 21 [ 765.351475][T22867] IPVS: ftp: loaded support on port[0] = 21 00:00:02 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_thread_area(&(0x7f0000000140)={0x3ff, 0xffffffffffffffff, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}) unshare(0x24000000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="bc098400e39c7c4f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0x0, 0x20, 0x40, 0x2}, &(0x7f00000000c0)=0x18) clone(0x24000000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), 0x4) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000180)={'veth1_to_team\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 00:00:02 executing program 1: r0 = socket$inet(0x2, 0x200000000003, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{@in6, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002e00000020000000002000000e000000276618ebb02d65d64dfbafa37191461e0000002"], 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="c20000000180c206000008004500001c000000000006007800000000ffffffff11009078e00000010000"], 0x0) 00:00:03 executing program 5: syz_usb_connect(0x2, 0x31, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008dd147101e041740612e0000000109021f000100000000a204000001e6796a0009058e1a08000000000405a1e25bd8edb4d7b7471a1ad742a2f292fb769f5b0e7b2760704e44463ac40950f150bc609836d085220fc6077e043d6aa0c515384034a8a07b36c23a7a5c73816f85083bf117ef7626f54eab5de80ecd28dd0f1ae28e24136cd03ec151981e88f10ad4b24c1d5c3a61e3aa4892a8486dea24c3931c5d8e7883d497ab5608fc56824b83480b92b05e77e7e4401d"], 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x800) sendmsg$tipc(r0, &(0x7f0000001b80)={&(0x7f00000005c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}}}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000600)="31e4bd4f17eca1634da3c38afa5c239516373071ec708c36dd8c18feaf19ad85d30e75bbdd7319b34ac757cb89f85c590fb7186b0eb4de7b70a20ca62407d81b7445f04da03d67ebc4f5fca31e9d4f5f8b498be0eed827c2dd044103b687f1aabc917ec35ce6e22abb", 0x69}, {&(0x7f0000000680)="754eec818949530733b76617bcfd990e5fac9f9eb2b3b421268f1efee11ce1be0047c9511888f74963eb0a45722dfa611dc2cd82233fc762feed5dfc82366ad0c7cabdc111343b6616a239d595216d18edaee0fbd8b9ae06e4882cbd3d6043ce7b5d0e27f3bc7164a8e93f53cf2585c147550bfe554cb22221808785194e22d22ec4553c1c84945f47956b6f547a", 0x8e}, {&(0x7f0000000740)="54f34671af26fc40a3fa6454cfdcd8f48cf02cdd38b45102bd17e242054cd034aa4f6135e2950f6acc9443ff1f2b829d905a693f49eba9d18d1ac55cb0774ec70d55ff5b5f7651a5b68bbe39bab75c4a9fcb572f844b3a7fee22cd1d40ae47cfbee7ad603e76bbad226230017b6294e0d1379a2c971e88ab06bf2bb342d72e7ba1c7c7175700cc3f17005cf3565928b7448e915cec3d7ff44c3b45e596", 0x9d}, {&(0x7f0000000800)="6f269be2dd3d2e96c052ed8ef962702b8d782ddda76410ea941d531cc384efa7133dc653aa903ddb2bc70626f26b95c3a44542a0b93ef49571d4d03a75891bdb9d", 0x41}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="c8a9617322ab907b1888d3d1fb1651e15130aef1be46e6440ae6e43fef2a34179b631942e69e35f5c7a34734e47f94db572c02c15218d0ee4d4c1f1d2efe91cf8aa8ca82dcbe2d2d4a", 0x49}, {&(0x7f0000001900)="1ed16c104c9ce14eb446c34ea1d2a59d3a4097c4c93ffb12bad1cbc04cb5c87ef46779b146943ec509b9e4e8ddca79f09cf8d93c519515b223670296d8a440e0acf99483dcd2a6cd852caae42d738fe455ec821835b5a3e70fb5d32ec6423fe0b573b63f335e60a4fbb53dbfaa5ed7c50c3edd66a61618cc", 0x78}, {&(0x7f0000001980)="da37ab7444c17ed3707a1841ffb10e76a415621d5f64e470c2d7a6c350ecf68307613769288f1ac0d139e23bdd54669712d2195210bb5f02347ff46ae5f243234c0a2edc2a955b341bafc1d52170621af2917054bc3ef4924c095d29391a84", 0x5f}], 0x8, &(0x7f0000001a80)="03d437211fb7b140b169d45ae268ae878aaf2f01d247f73c01f1494604a774493fa2e46f4275984e79ece4872a7a0539f70426be465b8e08a086e85a257652823bcc05903270a88bb8ad5a1329201c914dfab7845c62e05aaa7c91e991a840d9960960d3cda384dfdc639921764c587ca8048e35b15ca380bc345209bcca5db7dbb6f2eff19864a5edc0573944bf2aa4a501635f2943a2cd9b5096b2283dccf0cd038a557b40a190ca8f2cf2b893c58f061d3c3ac8f014ac3f9deeafb51271ef17b35de7464dd1ee7fcb1b4bf39e6976c97e179fdb1a2bf95b9cbdfaf680b180be5e", 0xe2, 0x4000}, 0x800) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'team_slave_1\x00', 0x8000}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) openat$cgroup_type(r3, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) syncfs(0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) r5 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1000, 0x25102) write$rfkill(r5, &(0x7f0000000240)={0xf29, 0x7, 0x0, 0x0, 0x1}, 0x8) dup3(0xffffffffffffffff, r2, 0x80000) [ 768.282061][T19708] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 768.652225][T19708] usb 6-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 768.662803][T19708] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.671974][T19708] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 768.681077][T19708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.690653][T19708] usb 6-1: config 0 descriptor?? [ 768.937682][T19439] usb 6-1: USB disconnect, device number 50 [ 769.711915][T19708] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 770.082109][T19708] usb 6-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 770.092509][T19708] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.101504][T19708] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 770.110695][T19708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.119977][T19708] usb 6-1: config 0 descriptor?? [ 770.366638][T19439] usb 6-1: USB disconnect, device number 51 00:00:06 executing program 0: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f00000000000800080018000400ff7e", 0x24}], 0x1}, 0x0) 00:00:06 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x5) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/134, 0x86}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f00000002c0)=""/77, 0x4d}, {0xffffffffffffffff}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/208, 0xd0}], 0x6, 0x2d) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0xa0000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x401, {{0xa, 0x4e21, 0x50, @ipv4={[], [], @rand_addr=0x9}, 0x6}}, 0x2, 0x4, [{{0xa, 0x4e23, 0xffffffff, @rand_addr="1ce6a9ce44c69650768d2d6905d43c59", 0x3f}}, {{0xa, 0x4e23, 0x5, @mcast2, 0x3}}, {{0xa, 0x4e21, 0xfff, @mcast1, 0x8000}}, {{0xa, 0x4e23, 0x20, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}}]}, 0x290) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="230000005e00817491bc655065d7aee4050c00ec1e000000fca300005ea2c3bf8b1832", 0x23}], 0x1}, 0x0) 00:00:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000eb8de108697a010036190000000109021200010000008009040000009be13600"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = semget(0x2, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r4, r5}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r10, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r8, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r10}, {0x2, 0x1}], {}, [{0x8, 0x4, r11}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r12, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r14, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r12, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r14}, {0x2, 0x1}], {}, [{0x8, 0x4, r15}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r16, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r18, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r16, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r18}, {0x2, 0x1}], {}, [{0x8, 0x4, r19}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) getgroups(0x6, &(0x7f0000000140)=[r11, r15, r19, 0xee01, 0xee00, 0xee01]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000180)={{0x10001, r5, r6, r7, r20, 0x0, 0x800}, 0x4, 0x2, 0x7}) syz_usb_control_io$printer(r0, 0x0, 0x0) 00:00:06 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x06\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='1\tq'], 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xde5f) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0xa, 0x80005, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8020006}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0000080002001075a31100000300ff000000080002000400000008000200060000001ddd06008100000014000100fe80000000000000000000000000002b"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r8, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x3, 0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x78}, 0x1, 0x0, 0x0, 0xa000}, 0x0) 00:00:06 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x0, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$eventfd(r3, &(0x7f00000001c0), 0xffffff7f) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mq_notify(r1, &(0x7f0000000280)={0x0, 0x23, 0x4, @thr={&(0x7f00000002c0)="355bf1067d82ac0cb29104a3fd18aa406f10e684e521a2d2bf7bb2", &(0x7f0000001200)="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"}}) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff7f) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) [ 771.590755][T22893] IPVS: ftp: loaded support on port[0] = 21 00:00:06 executing program 1: migrate_pages(0x0, 0x0, &(0x7f0000000000), 0x0) 00:00:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x400, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000540)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0x0, 0xba3051398ea574dd, {0x1, 0x0, 0x5, 0x3, 0x7fffffff}}) fcntl$setflags(r3, 0x2, 0x1) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x0, 0x1652219627cc0636}) 00:00:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r1, r0, 0x0, 0x9) [ 771.812467][T19708] usb 5-1: new high-speed USB device number 18 using dummy_hcd 00:00:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 00:00:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x177}, 0x3f00) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000240)=@ipx={0x4, 0x8, 0xf1a4, "f23e781ba42a", 0x1}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)="187efad370c41f89da7ef7cf5e7b4aa7912eaed71c7ea8e99c3a98fdf71b6e62ad91ef88f959da57bc051fd580524d2f708a54fc99bee2ac6525053dedc6f3691436e0b7495331f295fbfa9168b8ced0695ff28513d5d9875020e5167ca1794b204d229a6a5f911a658a17898dc7c960fb67341e5a481d05a61a067874a57f3e9b56278f93145453ee5d079b62767eb2d522b6958d0f82dcd487788bb9b6efe543d00d", 0xa3}, {&(0x7f00000004c0)="b609b0444d66512e9ffe50a38c8a7acb1700d56920d9e56c84f02d7f02c35bfa402c85135a15d9a56b841562adb93ce69a1f750a9ebc601c9216054902198cf9e711dac99def7b8f37a6de5767faec7d8589f31c52c0007d0b286d9f1d579b03989ce96daf994b5d5d95c4b1678183db5ec2f97ccefebb8db1459e4c7c4cefedb26ec6f8fcd093fa826ad4a808bb3e0f78f40e2160600cf898a79810bfb6e77c6c8c8df4034e467ee564e35e43e83d750b84b0da81934882444698b36de1b460", 0xc0}, {&(0x7f0000000400)="15692fab3862dc91ce9430a2bd4f0076976c714a408bae52be6acf22025ec842f4960abb1fbda3cc63d340612a0dec93e8d01007af21ab833f3c016723431f93e26bc8b4d0b8479b024a7fcad1cc7b0db453e26ae9d967b7a7511ddf69ffbd04fed02a32e38423a90e016a1230c7fa", 0x6f}, {&(0x7f0000000640)="897c150c06966decc3986ffc39a7bb048d04aec3ed483283d0ae89d2d9ad1a1c94931da3e78d7938c9d67f8b0b75c550d640aa934079f8e86a2e1bd894bd9cb4df5bec3206253ee1aa3349d5cfebc6ab65fc6ea5d80a7644d0b2211f7ad09e957f6784b65727d9082e725aadaa9df257e1a289b1bbb4ed61c951f596160664a2594218c78532012728f504df6dfc", 0x8e}, {&(0x7f0000000700)="4c20bba2f3d643bf52827f163c0abab1ee1f7ab76b87e89447e5987481c5cb139238fdcd96fabf3c245b8cedd793fbe734a4855051cd342e959939b33dfe83310de28b0e9f3ac6166efb57763e0b50ed48d5f5e7c384c61ab26c", 0x5a}], 0x5, &(0x7f00000008c0)=[{0xd0, 0x10b, 0x5, "87bf1a4d00760a25ba731e092743762c8e18a71ceb79e840b85e237c906ccfccf53e54e579f1c6755e76a95dcf8f6a5483e1701f0afe758821264b2339bd5e091cd1e934a31747b5886df208586806359ed5f5b944e3ede668f6b25f289ec440f23f7758ce16cf1637c2f239aaf465ae4291dde10c22997eeed4913699b7295a73502ac5ef35f3bd9ef3ff594ccf3261bbc1e40ddb8d74a42634afeb4f23b4f54a62d043b591861a7628483056e5e4925fca02b6d7fa82ef23bc0b"}], 0xd0}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 00:00:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xe1{\xcf\xb7\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8fh\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) [ 772.072015][T19708] usb 5-1: Using ep0 maxpacket: 8 [ 772.193244][T19708] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 772.202653][T19708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.231259][T19708] usb 5-1: config 0 descriptor?? [ 772.284537][T19708] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 773.335150][T19708] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 773.345797][T19708] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 773.354324][T19708] usb 5-1: media controller created [ 773.381666][T19708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.437864][T19708] tc90522 0-0018: Toshiba TC90522 attached. [ 773.452369][T19708] usb 5-1: DVB: registering adapter 0 frontend 0 (Toshiba TC90522 ISDB-T module)... [ 773.462531][T19708] dvbdev: dvb_create_media_entity: media entity 'Toshiba TC90522 ISDB-T module' registered. [ 773.512427][T19708] dvb_pll: probe of 2-0060 failed with error -12 [ 773.562493][T19708] usb 5-1: USB disconnect, device number 18 [ 774.101971][T19708] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 774.341847][T19708] usb 5-1: Using ep0 maxpacket: 8 [ 774.461984][T19708] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=19.36 [ 774.471163][T19708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.480834][T19708] usb 5-1: config 0 descriptor?? [ 774.526184][T19708] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 774.848571][T19708] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 774.859675][T19708] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 774.868148][T19708] usb 5-1: media controller created [ 774.895933][T19708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.939618][T19708] tc90522 0-0018: Toshiba TC90522 attached. [ 774.952004][T19708] usb 5-1: DVB: registering adapter 0 frontend 0 (Toshiba TC90522 ISDB-T module)... [ 774.961572][T19708] dvbdev: dvb_create_media_entity: media entity 'Toshiba TC90522 ISDB-T module' registered. [ 775.002296][T19708] dvb_pll: probe of 2-0060 failed with error -12 [ 775.056007][T19708] usb 5-1: USB disconnect, device number 19 00:00:12 executing program 0: r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000002e80)={0x0, "50f1f248bb7e91fd7072009a1a70b4fef2c9cc4e3fed290fa65995d43deefa8d4be8b2ddfdff7eda5a92f3e7081f645d29a7e0fd449dc61a9527f11c2c6693a990a9b5333d0baba4e883feda3822a2db39f7e587a952425fa4"}, 0x61, 0x0) 00:00:12 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="8d99f4ff0000c944"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:00:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$eventfd(r3, &(0x7f00000001c0), 0xffffff7f) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mq_notify(r1, &(0x7f0000000280)={0x0, 0x23, 0x4, @thr={&(0x7f00000002c0)="355bf1067d82ac0cb29104a3fd18aa406f10e684e521a2d2bf7bb2", &(0x7f0000001200)="8bc3c8764fee664111e3da8a7908b9ad6902c03b117ac28df3bb67e60f5464b87273240b34363651e464338966d1675e0387d897c39369b995324a3d1253d02da747c49e3367fccd22940d4cc8dfd213458479e796bec4d91b1fbd44d853905faf29fce08d5544ee62816cc69546537c9bb23bde7e3ddc523dc6191f9b557e4526773bef292b15a027bdf1a2874fbab0141c2418495dc2fe2545f19ea231a428d58e05056efbd6f4c665e6bd76bc5c787a6f453333bebf256034830d34a55ef233b895bae8c2936cab4dacd3fd131bb76f44b6952b27509fb2d6b1228373d64a85817b8d7a5b181cef12d08f240741d996ec78ebb31bb6a7571b3f0f2d4ddd2e4035243d4ffbb6dc4ec29b89c792e6a9854dfd2ed2af1965928e35246651c3661f4e9574ad7a3873a4f4aea2625a88477da0946f382b12a953ca0c25ad03d846cc607bbbda9645a08930cfaaf452373ac9ea3d042c43c11041037d392db4d3b68fa1264d62dfc58c0fd41fc44618a98eef6c688ca1aadeb6ddccb0b345b384c031ca513e8bd3a10d01dc13caebf0b065d0afe55b8244d079004a4eafd8b627dd8943d0a23eabf873404732f75005e127a8190733c962f106db3780cf382638865d3f60832404ef3d42e8049a6190388152e4e654784bab9abd46df5120d4f803d28aeeaa0e5d8f971654887ec55b00f986051e09c25dc1ed55fd58678138d6256b272743da5d548b5fef03a935799a94d25d70ce9c903f96619941aba214c4177b54fb7fa83c74b1d6c0150bca9fb4e3b2bad173f4db3275aab075f257177dda8fbac5517d16474c454302de3bbb393438d3defd68e748d7a52dab817e7091c3fd92608cf29384d3f31c8df742e6613cb850dc37c7246cb94877bb2e19aad11c0214779cc2d7fcc31a11561684ac118847096214d1f58d37404b19251dbc1d57ad944e18c37e12f30e0d96168fabca6d61022a676102841493fd8c0a4ae0659151a4fa94890e51548848fe15158ca3d339991ddfc100572c045c079fefdfd55ff88ed410808decd257afe867a0da850d1ff7a33807d15cb5dc08f22ab06984d5888c0a8c05995188523cbbce23deb15195b05a5a029982b4c0e2fd374f936ccd4c671758902ffcebe40e6d3fbebdcb345c31e926a7f8dc278787e2997ea0ea3a652e484bce0df821887a409afa98f014c607a5796d34bd9e6884532f2c18ea79695c102df91fc4969940b6731364191710fbc1323c0cf816612940f448054d808b4ec48ab2009811aef6191e89a2f14fbc9683b0c8d5814f8d2736031a5df3dde8c2c53cab169617670ff60e7855f6e741ea987a5b858f54f68b47c3cb6261590e87508d47268e94e9b2c2d223f46e55fdba309b3f67c42e2138fb43c89a4dd49d8ad7a9b3620e58091727f3909f45a50fdde956545107ec1da65ec01ec8b80f50f09ae2e300449cfd0f00423091912cef8fc0d4eff7a02cbfd30bf4f55b640e90f5347f5ff2d6c59dc47d5ec88714beb233bc8fa43bc9ba31c3608d13b6c09dbf4adbf7843790f27b1005a7f47e9a704083380aa990fb4d1fe0e1c2d2d0bd5b3cee4b80d6c1bf1d8e6c2e88a8c7acbcd6d92aacbd39b6252fdaec5987d87c946b0b7b6a6eb1bdced677340a94fde9ff3b5cc1b965e47543c223e97035067c810982e801c61022c6938f0671bf53912bb1c6c02d24f3ee3b441391757e0a18f47aa2778b0edf588270848389aa2c9f19aaebbf18b2b3e0d60ba5e1dc7cf41071697557f3733c2adf3f774f80f0d92294deff9fa99e40994ea3233d44b0adf7f23a5df6acd4664415fab3bdee6ce8351a117b57fbe56814d79a89194b239623e3d0e92449e2414b2874bee82080992e9da8aed5f580b61fdb22a5646c3e9de60d4c86433c1d900e2169192b006899c3e0956383e3c8e0ec6cfb6d3bb611795422fc4b0f3ea4fa184e89dbaf04a18422530c97494e1959767f008ba47d1b1495f924ee32bbdcba249a349d19aa16520dd8c6553223624ad84555b910b3ab7e374e2e83a890c75d06fdbd03bee309251b4388affc563583af8b4be6bf328aaacdfb87c1f4b94ce889877cfa86a5d9982128f03bd4b49706f6baacb178cb8ef8ad2a686e7571184ac58ecc25c36a7e6e43cc08ed251fc8f58cb807767b69dde4b70b57a33c4abf3457005e9a31b699a69439ddd2d7513163bb3ba142778851cd4243a262089e2273fdfe8a5c5b3d3f92eb209d018564b0a76f6d617002b1bbcd6ecc28805788588e0f28f34999f40b8343f5eb35dc988d247d2bc7c8da49c820a814d12f4566e40d7ce97cfcb06c48a3a543b2bc1fff354427d82194cfa5600593b2484016a840f01f14437de96c0430d3472ce07ed6f6a674555d942a2d60d7f0cc23a24cb65af23d53565b61053246ee78d1668e5120c2aa25de9fc591b3c7815731d42fd317f5a13df7796e68fa3766a4d4b26eb1f2020eb96268540d7d562d8d346ca5436555d5cd32e0bc0cc877f7e8872928da558e8d87b2b695f871fbef4d4ff0efeb2feabb1f480de73bbd6f0f68d117d1603dae709b14ef0fb0c0b29b0fdb555ee6318ae62bbf24cb22b4f0e7ec2e617aba52034a09a36b39d83150035596f4f4f8a1db86afe5b0f1f28bdd624ccbc729f6c9f1ddb34b308e49a103757d52e1e1b1ffd23978df85b64732fe3aba8f282b2acff9e417739647d4026b86762cd7060140816d9c960ab5503e8fa33b611e36975f5fcb41b9a7e92809eb3d1fcd6f1d9c6704c7de6f899593c624b8862fa6851597475f39c19112737e8668ebc3e1a4324c381034008da36615d61a8dee7a22492d8e74a1c99bf78a7d8f308b93076e4a6c169d42567b136a608a2ef3e36690088e3d9a2b864294678a00c6266b30b9ef385b8c4b8a71999f1d8c3f78fd4b47256fdf760706074072e58a6a972ac5d11d49c735ed969a94e949e2db8c4aaf09f6ed274592dc38ef5a1a621b4f5ba4d393051792172e66d6b847751d0b43bb14bdee2d938e25601acfd642e8b9f00811e92b20f23b4d7de628ef363c52502a321315ba0ddbba560d08147442dd1c98c74e9ecdf76f74ced38766ed8c2478b13cb6a8b0eece0d98bb701dad5bcbbbb9a78f266e87be8b529cf5ab4ce02854aa07abc0e5308fa64ad35eb36f3889b6750d69221431dc3672fd5a1624c91ba8e2e0da77741031c8d032046ca88963ce052362394ca2b81fb307fbba50d65c6b12de64f0e06cfbd681a8734251575295301debfbcb91f087e848c6ad7978978cfa82d9b2e3816aea50024d669fe4714d2c1e5f1a101c6d8174703aa94c2f3f4a9877c32057819756eaa8123f76700ff8f0f26f4bc2f477739844b8d2124aa379837e2822939f44cdc45e47b437c36cfc32a744a8aa4ddb9b0d9bd73ee6abbad1c1694e979bbc062b5d2ea7da8b4517a7ae10639efce5cdff8679c2f8fc60703e96531951e9d69adaada605d76a4222186daade922f5fd37ffe8b474e80fa2792e4af70800322d3ef199b3df821ca330a365b067efa5d0f155d91055cee29c8b1e1a0dd63072ba4727d46ffc59d9af6f3aee4215ce510a63c7e20719310e4ea81059c83c1058e5b6008db11e6f86fa3cc89ae4569b8bfdc846c146f97fad787f81b45b4325b055382995bc74c16643c78312ccf12c21782f78eb71723802dd2ec6f754bed8eb2e60978ffedc9d9d7c246b8e2e4dabd9ad8136955089d6e6a537688f980ade5ed7bba07ffcfb99838b6d33373b784aede2ab667637cd4f3b0c0b7435816231eb153e3db7f8062a97ed580a3dfb216cc8852a1bf467789b51790c7b1a4fd8be38fc105efe19324144cbb15112a5931e3000501b165ee7af47686de2d2a990b25bd853499cd628a363aea2fa4cdda91733f7050d6418b7434731a5d3c4a70c18bd518662265a6799ecb456079303eaa5a769f734504aded52c212a830658cd14ab41d3ff8ee3e1eefdc9fa32994c2f249c41aaefcfe865ec720c44dd4356e2a9a48652657cac8ded0838dfc058568c964373bc57ff372eb16320c1e590ca44322f4e0532a9223c0ace3fcd70fd2af989046d1991174b93e9f3643d4241dd3c446b97159bcdd9759f4c000839473f54c3ed6746302cead483230c4b0560d259a0618c97ab8b4ca1cb864fdedd6a37227408c32c8541629cc91e8c86df767000a9764df3d49d285eef9c41081b921f0c07f5a025949a8b3a56fb7c53f943a4cecd128ceca5ff91a253e6072b88671d34359015993cf700b4835f10cac99f365764d7a6acd7e7d1b16b94c1bc86ea0e86da659d59fe0e45ea2d90f0adcb493812781f5514d1a4adb182f75da80530ef7bc311e331cca3f3dbe18166f84529915c6141cb3334939f7a728fa2afaa9dbb36988a95dc2b85d26b70798356f9ce2e86ff409aab90c7fb910860d26bb027a688a54c9305e739b2634a4976501749294b527eba7da74225ab1ae4302cc826a868c84233ddd6e2b7592317bb81bc848a6505291580ebfca1ac4ad6ea9f6dd251fe7b189105731d0d74b498b506d63229000da2695abc741df02a4542f8050dc41bea56f774892516ff3594c3b997a3aced6adfb140a5919624cde258bf8b24bbffacbfcde352edccd0dd5fe18b6109c94f1f5ade5351350d3b4c60b71af8b4c0931ffa01b2a13f606d12e4a13cd6d6c2bcbfc675ec580730972ee95241c060dc5652887f602b308c5d08eb65307aaec1a1d7ab752cce92dc973f8034613522d2a8906846d8a74d4ae2c1b425867451a9c3e3fa01080275ed6c4834df9af9fdb8d42e6947cefbdba6c0cd299b556208f4cb33e7209284db1b91510443a8e963784de7a419aa3d9fb8122d27291d701f19421d5e94995a7370a4516be78bea030120b888d57d80132b531f6ba8d0302826842dc91dc3aea5590842e4563603f12ba2047abc0a71f81807f38e729549d24a0887716c933262aab64b459d0cf0d6f870cac225f17d80761957ca3d5e105d8e5c513957697e9f8f88671d2ecef5983c4d47e2775394b3c1d649d8f7869168c57a096dedd64fc99e500963fcbcdee5e2cab26ffc1a86e33197829b4d5b85653fa968ef75155fccd2e0431016ed9797d2f731ed34b223cf576ff6505afdf06b7a378037051ec0790eb6778370bc7082d8742971540f0658501b0d48e29ad4221030e3738e1973a99d29c81ad190965184b7ed2718ed4688a70d12b7fc88d28abfd99fa2e74e3ddd0a3a91dfd6d3ab2b45b1dca32ac02f2cdef12de4c2e15a188a0061432466357bb423c3e1d758f7e6b0cbd0c0df04fd51189351b9447d8f3d4c8e20cef8635c97a332ec23bb4acbe24b025abb4f3375f9bbddde06c749818b4c0da9e05301ee2f3cb0e032699b30625c0964f24eda867c1444212c2404f11ea849efb14d33d7b2a3fc2b9cc0fc945584afc100e2770b66c8d3e4dd1d84608bc34daa63b091ac1d07ff79db5ad8803154ec6926d2c8032cada03034ab87f760d6f252003085e730faa3c0ad6b43b2c0fe9a2181f9b65e20e611ab28b05793434f983aaf6dac0646ef8f046f8aa30bb07872b952d3b949f00696052d4b5c3f57f35c635253d780131fe69d572921bbb5334031d68b8e9b88bfcbfec7665b2544ef39abedbb3d460c892725fd7fbcdf02fcb879b9122041ec3c715d5f473961fca1e4a2f15353d018f269a795623dd0f78b24223a6925f304b9c05a15412b69d5345860ef54a9b6f6ae1d39b582b15c92abf4867f6dd32519725c2c991299c356f679c282b5ed7fef84672877623"}}) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff7f) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 00:00:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18) sendto$inet(r0, &(0x7f0000000480)="8b", 0x1, 0xfffffffffffffffd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/148, 0xff1e}], 0x1}}, {{0x0, 0xffffffffffffffcd, 0x0}}], 0x40001de, 0x0, 0x0) 00:00:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x3e3}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 777.905204][T22950] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 778.017278][T22951] IPVS: ftp: loaded support on port[0] = 21 00:00:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 00:00:13 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f650000000000006507000002000800270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) 00:00:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) close(r3) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r4, 0x0, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0xd01, 0x54}, 0x0) 00:00:13 executing program 4: clone(0x4204100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) dup3(r5, r6, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffe3d, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x800, 0xa) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x1000, 0x5, 0x1}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) 00:00:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x816d1) write$P9_RFLUSH(r1, &(0x7f0000000180)={0x7}, 0xffffff38) fsync(r2) syz_genetlink_get_family_id$team(0x0) io_submit(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$eventfd(r3, &(0x7f00000001c0), 0xffffff7f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 00:00:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xe1{\xcf\xb7\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8fh\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 00:00:17 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xe1{\xcf\xb7\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8fh\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374) 00:00:17 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:17 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000280)="dfb6113dfd44fbb90235a1884cdce05f6ed0e20a19494ea7f6d4e446bc167d75018e727afefc24ea8ad8feba5a7f4ee9ce0a2bf54ce91578fdccc0512b04b8fb4cae861286c652dd4d04f93bd95b92155dfd362ef4fb3b64567c57611bca0a7895d0457c1aad0bb043cd80023eb2f5464d98f48a12e580622ceff95a178bf3355662b362813d0e50d6254c13f22160ddee31bab3e677cdf2fd9e3c2a4af6c70f67b4ce97720323e2bca493301b90", 0xae}, {&(0x7f0000000340)="f3be71c6544f1ac31700823d4c8cb1c3543f7e802d0030678713c5b9712076001e0346f018aa0f9612050124515de0c8f21d90e422b5b0bc443b378a47487852ee846f83509822ba83ff014afa005e38b246a0ab71bbdc7b8df6a5cbc3a60566754ab114eecc37addf1ad35b1c5c385a358e6b2f8f586678f0a95cb8618aefe9f3454e0b09e9bf9e68a05ae582349cbcad4dbddd0c76244541a677cb9e264b4379d1040f91e0e1cd47e985ae84e50274e33b68d5210e50b59f1171653aa8fca63ba1294d3818958413177cd11365fed838c7d11f8140d2ab1dd068d7955102434c965eb6fa2f674fb923bc78786d3fa109ab308c", 0xf4}, {&(0x7f0000000440)="97da7c82defdbb748bb4e811bd22c748125282ca01535ccd49e88200eb92482ee9bed942ea84a0d8aa25b36b06b7a4554ed9b1a863a3de88777fea83fc84bf274c0f237dd5ffa30f7d43ca79e80dabbd1c4c5d127f36d71439e0ad253067178aaa2f0c89e16305ac4eb1e160da797be76d2ad0655454bdfe0955eca3aa4e0b8fcbcd86e2d4fed03905e905fe4ddd82b743b81dbbaade2b73fa9c339a631b74f813f2925e43a3366b345ea8a3f92fe9539e54217bb85c4d050155b6cf480a4ae3176ecf35628fe353d257ed54b224c905259ae5cd88e2afaa8b19b69f257222a26e82ce72fc1ffc3309032d13ba34f93e9f6c6efc6d8f909eb1ca5f1d2509d77d6c49f5fd170a8eca3dd837a02bc799fb56ee3b974de9755144d13103bec9d20a159254c07cf799a9653e7295e56cf4751ee319f1cedebaf73a5e8835a915087a7a9aeda3c9c481cdb93132d1faca77bdc5883a6e749d0f0bc34bda3d7c0cef6862af7d78a252becc07f751737a8081dba2abb24ad56d15c8018e30618ddba9e26e80f089d775cbbd1d0d9cdcbc555ea2a1d1cfab3332df992c2279ea20028e3efb7eefa802f3567e617e0bb6ebfc3e2e7c13f3dc5843026f1e7bff5415b40c64e194f9ed3e5e61b37b4c07cbbe1541f8c231422b51bec73e8960c31de30a8a41f5cff79d2e12d1999dd068c1a80e31c10a0edcb4f431bcb9e057c10a1f31593f7f45e3399b93dad41783ce6eae06eaa4c555cea481fd0c02ae78410dc13a184f9a6760a0d2f6e61c8ce6fa7f3cd65f571e2d0f25d4e2f572e12c109216263ea092ef4cf0861fe1fe43d1bc3e2fd87d57349d57651c370322d66561be069fa40e97420b186b30119bc0ac5d9860445402bae47a7eccff2008b48af73d05c3ae6a997bee9dcf7545bfeeb5f937193230f7bc1f28542db5fe433d079198617b7dabb2c54ea5aad7425ddcf69b62f8ccc0aa8a59906fdeda07905e0ea33c1d0386e85e899cd5405df0502100dcdacd909b798fb1fa4e41fb5d6b0968f0b119c9a50dc54913172921f8cc278f5e10fb65c2cef9138ba17c5a85cb35d16acbdc1c0745b49c6c20582b9df11788faba390985f793a1c09b96e899dc2ace521778f9e90113958a31336551df5a9ccdf3318b3f3ee97f35e88382a0713543851ff15e79cdd9eca00b45d115fe760e40cbc61065de0c01ebb98017bd93c8a2eee1480756e9a12a9a6f70aa0240fb0d058c869f9afafcd3da5802e181566cf2b01b61324e6a950ea5f67665a885462720dda9fa38cd4eb26dbc7b896c801d77eaa24c21acaa92a9c3f218ae82b8746fd88b62d8394234ec34c242b9e206a9b734176ee734225907d133c19da60f87b0821ebc9fde289410d371425526f2df51616ab576730af9803bd1c30db87a78a544ac07786c46de95f4474a09ba24eea17a7e1289a4be4ce9bb8e95d3d9e64a418856c71a4b8458a879c5645a9bbb6d16dd106f466e668c8d8efffaf79c14283199102cbaf1ac3356c0dceffaa4da3f1dbab0febccd340de11d64fa551b3e419d042e2e222084dcb6a1953d028af655381960fc1f4fe423ef3b864c5bebd41697119de732ac1b3e70ce1c6c7dacb0b93d1bc7c69eee35625c74ac4ee8fd0e3c6671ecf2c08a6d97a43479d96cd88ab257b93604e89bcbbc9aa3f3db5d87b051dab51a7bca79e148ea0fdf2a1bd1581dd62ede2b07e6d1853f05a0f25355a2b2064f945bc2eaef07d3869e32e2a55b9a7fed88e16b0a77a482ada2e7881414a7d8887b9ce66e2f2a22d46887c250f582093ea52884231e0c2c3a9e1f8c66971b8a03724ad3332e17dd5899689c6337f5ed7da6594e03aa0df57dba2254abbcbb49f1aaa00abffd1887dbcffa5762a57c18e3b3dad1c7b7f5476deafee8c7cc6a9e2db516c18ac648998299bf8021500fac69e14b3568d42149d7f9c0daf3a27f50f253698217e385e48bd16ee53716a369ae8996d134bfb0c9a10182bd5c074d86304d5206ddd8b49845f72eef593351c285624a6c8e635a38b07a4aef6b4e99f222804769c6a7cda853230a98f1505340bcfe21d2b31a0be3597f892c5ccc662363b47dc601e3a45f98078173a9c1946322b1c7aa2c7ffeaccafd03db67ec83ba5d96831a38582a113e292c5308328c927bd59d499101d9ee15ec16097ac5655a95a17d61c6580a41ef7c5802920f4f50a1715a7ff68d36e9111a370fabeae7770c3945377697bae066bf0f49478a0e1db3a6211415b97e54589fddb3d1db4bc1c5ea2c4618a54cea8eb7f3b90cb56de41d403eba7fd7b00327176c98666b91980231fc97b9c17c9a0e3b535c9660b85c606199d8e8a37014e385c90bfa60473c79db43887e671571a691fc27989c2407372f091f3aeab9d1fc3f4c492d9bd055f0b3856bf06a1afbcdee7cd4e5c086b2531fa0964eea97082ea07ef66d07e764dda430cdeef28ad9ffc5fc36dc160a81ea2a536cfb643f180be7ef7f81e627064f14725118c4243225a469db6519433df1617e1ee6f4f3cd041a87b4045a0c41acf79f162bd9ebe9cd3f08e762989b9339c0a864334c9710e1e2d0ada545159ee4fd34446efd61bd8744fcdc6b456ad500eea44faf1a1a68834d47245eee639698508d8f443fdc52bcdf622da953e58966ed6e506525d28688ae44595028407157681372e997b5089d90b4cfcf5b590e3e5c7fff41c6b6f9543190fe1851aaa906016c58d6012b4ce4dedc2bb077792af054ac0b4073ae835ba479c3f3023b52bc4df094e683843c6abbc06d993d473a363ce9ee3f11b3f1f48dc8707665117905bda1b77ad4ce23da9d86b60c107196ed7475648d9fbb2cdb8283593e299d3bcf3d303045affd851039d649b2d3a8ad699a8100b572fcd5ad7093d42aff0c66be38cb45c5b39d47f10fb27805579bc83fceca523136bc4468576b65b4c8bbff48b786aa47d7ab2f1763567a6f39a93850aca761c46caa2cba8b1f63c8ee00c76b8308dda8d92b5991b0a15056ea80df6c36991e901e2df13ed3e9dcf20eae7a2be44f35a87066c203e1b0d7699f78e1e3b1e709002080c622d49f5fbab7d365488494f597fca71cb9647ad789276f5d5027168112545583ebc191ae06fb383e141c9bc5b18c5e3d3b4e5d867961e75892fb08706c9687ab54d75426d92bd54a6b32d3a2afbbacc22d48ea5ed02fc172db9e958a5beae8b2a8a3a88016544dea7131fdf3cca31062bdd8a91cf56231d46ad85c6b1bfe81f9c55c8303e483289860ee05716ad06ecac329457995b0b15f855ecf1a2f5dbbcce76f052080", 0x927}], 0x3}, 0x0) 00:00:17 executing program 1: open(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000680)='./bus\x00', 0x80008000, 0x801) 00:00:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$eventfd(r3, &(0x7f00000001c0), 0xffffff7f) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mq_notify(r1, &(0x7f0000000280)={0x0, 0x23, 0x4, @thr={&(0x7f00000002c0)="355bf1067d82ac0cb29104a3fd18aa406f10e684e521a2d2bf7bb2", &(0x7f0000001200)="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"}}) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff7f) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 00:00:17 executing program 4: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0400001b", @ANYRES16, @ANYBLOB="01ffff0000000003000001"], 0x3}, 0x1, 0x6c}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e0000001e00", 0x6}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x3ded5d08) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") splice(r0, 0x0, r2, 0x0, 0x200000011002, 0x2) 00:00:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000196cf5abed79ade3fe82e821bf457983cd2f299d21d1f0fe5cfb51cb7ff50ef419d4d5d4b941e7b1a73a7563602a9954d01e9f377d43a5053e2ffdd8"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x1}, 0x3c) [ 782.109882][T23008] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 782.154081][T23002] IPVS: ftp: loaded support on port[0] = 21 00:00:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x24a, 0x0) 00:00:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:00:17 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:17 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0xd0132b7bb84252aa) 00:00:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) syz_open_dev$dri(0x0, 0x0, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00q\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\x00'}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x6d, 0x2}, 0x7) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r5 = socket$alg(0x26, 0x5, 0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r5, 0x0}]) r6 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000340)=""/237) [ 782.987646][T23028] IPVS: ftp: loaded support on port[0] = 21 [ 783.070061][T23034] devpts: called with bogus options [ 783.122192][T23036] devpts: called with bogus options 00:00:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000002c0)=""/222) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) 00:00:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0070699fe36e29"], 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 00:00:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 00:00:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) dup2(r0, r1) 00:00:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$eventfd(r3, &(0x7f00000001c0), 0xffffff7f) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mq_notify(r1, &(0x7f0000000280)={0x0, 0x23, 0x4, @thr={&(0x7f00000002c0)="355bf1067d82ac0cb29104a3fd18aa406f10e684e521a2d2bf7bb2", &(0x7f0000001200)="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"}}) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff7f) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000013) 00:00:21 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:21 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x46000) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:00:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 786.504187][T23048] IPVS: ftp: loaded support on port[0] = 21 00:00:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) 00:00:22 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:22 executing program 4: r0 = gettid() migrate_pages(r0, 0x1, 0x0, 0x0) 00:00:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x13f, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001440)={0x2c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000f13000000050f1300020310000b1001007d00e1"], 0x0, 0x0}, 0x0) write$hidraw(r1, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) [ 787.258961][T23076] IPVS: ftp: loaded support on port[0] = 21 00:00:22 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x2) [ 787.515107][T19708] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 787.765179][T19708] usb 3-1: Using ep0 maxpacket: 8 [ 787.882263][T19708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.893360][T19708] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 787.906325][T19708] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 787.915461][T19708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.925010][T19708] usb 3-1: config 0 descriptor?? [ 788.404131][T19708] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 788.417185][T19708] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input26 [ 788.513641][T19708] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 788.606391][T19439] usb 3-1: USB disconnect, device number 20 [ 789.482117][T19708] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 789.721960][T19708] usb 3-1: Using ep0 maxpacket: 8 [ 789.842118][T19708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.853177][T19708] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 789.866108][T19708] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 789.875240][T19708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.884742][T19708] usb 3-1: config 0 descriptor?? [ 790.232348][T19708] usbhid 3-1:0.0: can't add hid device: -71 [ 790.238539][T19708] usbhid: probe of 3-1:0.0 failed with error -71 [ 790.247501][T19708] usb 3-1: USB disconnect, device number 21 00:00:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xe242) 00:00:31 executing program 1: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x3ffffff, 0x1c1343) syz_open_dev$hidraw(0x0, 0x0, 0x1) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x100, 0x101300) syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x4000) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x7, 0x2000) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x4000) r2 = syz_open_dev$hidraw(0x0, 0x1, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x80, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xac74, 0x0, 0x4}) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r4 = syz_open_dev$hiddev(0x0, 0x6, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000200)) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/../raw#\x00', 0x0, 0x0) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(r5, &(0x7f0000001200)='\x00', 0xffffff45) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000001340)='/dev/hidraw#\x00', 0xfffffffffffffffd, 0x0) syz_open_dev$hidraw(0x0, 0x23, 0x80) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, 0x8}) syz_open_dev$hidraw(0x0, 0x0, 0x2040) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(0x0, 0x0, 0x201) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) 00:00:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x0, @mcast1, 0xffffff81}, 0x80, 0x0}, 0x0) 00:00:31 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 00:00:31 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:00:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x10c) [ 796.093904][T23110] IPVS: ftp: loaded support on port[0] = 21 00:00:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x40000000000027, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x9) 00:00:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24200000}, 0xc, &(0x7f0000000300)}, 0x0) 00:00:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 00:00:31 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:00:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080)) 00:00:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, 0x0) 00:00:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:00:35 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:00:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='\x00', 0xffffff03}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) 00:00:35 executing program 2: socket(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18) sendto$inet(r0, &(0x7f0000000480)="8b", 0x1, 0xfffffffffffffffd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/148, 0xff1e}], 0x1}}, {{0x0, 0xffffffffffffffcd, 0x0}}], 0x40001de, 0x0, 0x0) 00:00:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x88fe) 00:00:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x0) syz_genetlink_get_family_id$tipc2(0x0) 00:00:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x20, 0x29, 0x32, {@dev}}}], 0x20}, 0x0) 00:00:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x0) syz_genetlink_get_family_id$tipc2(0x0) 00:00:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6}, 0x3c) 00:00:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000005c0), 0x10) 00:00:35 executing program 5: 00:00:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x0) syz_genetlink_get_family_id$tipc2(0x0) 00:00:42 executing program 0: 00:00:42 executing program 1: 00:00:42 executing program 2: 00:00:42 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 00:00:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) ftruncate(r0, 0x0) 00:00:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) 00:00:42 executing program 1: 00:00:42 executing program 3: 00:00:42 executing program 2: 00:00:42 executing program 1: 00:00:42 executing program 4: 00:00:42 executing program 1: [ 807.802043][T19709] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 808.041912][T19709] usb 6-1: Using ep0 maxpacket: 16 [ 808.242170][T19709] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 808.412140][T19709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.421252][T19709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.429587][T19709] usb 6-1: Product: syz [ 808.433867][T19709] usb 6-1: Manufacturer: syz [ 808.438480][T19709] usb 6-1: SerialNumber: syz [ 808.483281][T19709] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 808.685102][T19439] usb 6-1: USB disconnect, device number 52 [ 809.461953][T19439] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 809.721968][T19439] usb 6-1: Using ep0 maxpacket: 16 [ 809.921988][T19439] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 810.102180][T19439] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 810.111366][T19439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.119568][T19439] usb 6-1: Product: syz [ 810.123862][T19439] usb 6-1: Manufacturer: syz [ 810.128478][T19439] usb 6-1: SerialNumber: syz [ 810.173535][T19439] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 810.373555][T19439] usb 6-1: USB disconnect, device number 53 00:00:46 executing program 0: 00:00:46 executing program 3: 00:00:46 executing program 4: 00:00:46 executing program 1: 00:00:46 executing program 2: 00:00:46 executing program 5: 00:00:46 executing program 4: 00:00:46 executing program 3: 00:00:46 executing program 2: 00:00:46 executing program 1: 00:00:46 executing program 5: 00:00:47 executing program 4: 00:00:50 executing program 0: 00:00:50 executing program 5: 00:00:50 executing program 2: 00:00:50 executing program 3: 00:00:50 executing program 1: 00:00:50 executing program 4: 00:00:51 executing program 5: 00:00:51 executing program 3: 00:00:51 executing program 2: 00:00:51 executing program 4: 00:00:51 executing program 1: 00:00:51 executing program 5: 00:00:55 executing program 0: 00:00:55 executing program 1: 00:00:55 executing program 4: 00:00:55 executing program 3: 00:00:55 executing program 2: 00:00:55 executing program 5: 00:00:55 executing program 4: 00:00:55 executing program 1: 00:00:55 executing program 3: 00:00:55 executing program 5: 00:00:55 executing program 2: 00:00:55 executing program 4: 00:00:59 executing program 0: 00:00:59 executing program 2: 00:00:59 executing program 5: 00:00:59 executing program 1: 00:00:59 executing program 3: 00:00:59 executing program 4: 00:00:59 executing program 3: 00:00:59 executing program 1: 00:00:59 executing program 5: 00:00:59 executing program 2: 00:00:59 executing program 4: 00:00:59 executing program 1: 00:01:03 executing program 0: 00:01:03 executing program 4: 00:01:03 executing program 2: 00:01:03 executing program 5: 00:01:03 executing program 3: 00:01:03 executing program 1: 00:01:03 executing program 5: 00:01:03 executing program 2: 00:01:03 executing program 1: 00:01:03 executing program 4: 00:01:03 executing program 3: 00:01:03 executing program 1: 00:01:07 executing program 0: 00:01:07 executing program 3: 00:01:07 executing program 2: 00:01:07 executing program 4: 00:01:07 executing program 5: 00:01:07 executing program 1: 00:01:07 executing program 4: 00:01:07 executing program 5: 00:01:07 executing program 1: 00:01:07 executing program 2: 00:01:07 executing program 3: 00:01:07 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000680)=""/246) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r1 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a5", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r1, 0x0, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d345cda1530402b213c13253326eb29feda399e5e7c1512a76db93c4", 0x1c, 0xfffffffffffffffb) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000280)=""/151, 0x97, &(0x7f00000003c0)={0x0, &(0x7f0000000340)="d637daf087edf880d874d267b1c6d560ef6c7d7e493e795ff525abc90a6ed47da72a4661a94f3ce9a7c142d8a501225fbffc57d191097925561f69abf32b932d56d2d37ece81804b7e2cf96717102e0afd4ab5fe33462c6d398209db30dd3eb95062d7", 0x63}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000540)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x2d, 0x1652219627cc0636}) 00:01:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003bc0)={r1, &(0x7f0000003a00)='1', &(0x7f0000003b00)}, 0x20) 00:01:11 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000680)=""/246) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a5", 0x1, 0xfffffffffffffffb) keyctl$update(0x2, r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d345cda1530402b213c13253326eb29feda399e5e7c1512a76db93c4", 0x1c, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000280)=""/151, 0x97, &(0x7f00000003c0)={0x0, &(0x7f0000000340)="d637daf087edf880d874d267b1c6d560ef6c7d7e493e795ff525abc90a6ed47da72a4661a94f3ce9a7c142d8a501225fbffc57d191097925561f69abf32b932d56d2d37ece81804b7e2cf96717102e0afd4ab5fe33462c6d398209db30dd3eb95062d74f7cc692ec1f", 0x69}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x400, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000540)=0x4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0x0, 0x0, {0x1, 0x0, 0x5, 0x3, 0x7fffffff}}) fcntl$setflags(r6, 0x2, 0x1) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x2d, 0x1652219627cc0636}) 00:01:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 00:01:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 00:01:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$inet(r0, &(0x7f00000056c0)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}}], 0x400000000000040, 0x4008840) 00:01:11 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0) accept4$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000012c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@empty, 0x0, r2}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1, &(0x7f0000001a00)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f0000001f40)={0x2, 0x4e24}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000004200)}}], 0x4, 0x4000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000012c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f00000014c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001540)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@empty, 0x0, r3}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) r5 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x52800, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:01:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) getrandom(&(0x7f0000000180)=""/74, 0x4a, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) restart_syscall() r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x40000000000025d, 0x0) 00:01:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8993, 0x0) 00:01:12 executing program 1: rt_sigaction(0x3d, 0x0, 0x0, 0x8, &(0x7f0000000240)) 00:01:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:12 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x2, 0xfffffffffffffff8, 0x2, 0x0, r2, 0x1d74, [], 0x0, 0xffffffffffffff9c, 0x4, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0, 0x0, 0x7}, 0xfffffffffffffef7) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$cgroup_type(r5, &(0x7f00000002c0)='threaded\x00', 0x9) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffe45) r7 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x54000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00memovy '], 0xda00) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0xf543c716ab2faaf6, 0x2) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x4) mkdirat$cgroup(r10, &(0x7f0000000300)='syz1\x00', 0x1ff) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20) r12 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x7fffffff, 0x101, 0x8be6, 0x0, 0xffffffffffffffff, 0x8, [], 0x0, r5, 0x2}, 0x3c) [ 837.692255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 837.698402][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 837.704718][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 837.710806][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 837.717156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 837.723175][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:01:18 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000680)=""/246) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r2, 0x0, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d345cda1530402b213c13253326eb29feda399e5e7c1512a76db93c4", 0x1c, 0xfffffffffffffffb) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000540)=0x4) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0x0, 0xba3051398ea574dd, {0x1, 0x0, 0x5, 0x3, 0x7fffffff}}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 00:01:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd93, &(0x7f0000000640)={&(0x7f0000000080)={0x14, 0x10, 0xb2d, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 00:01:18 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x2, 0xfffffffffffffff8, 0x2, 0x0, r2, 0x1d74, [], 0x0, 0xffffffffffffff9c, 0x4, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0, 0x0, 0x7}, 0xfffffffffffffef7) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$cgroup_type(r5, &(0x7f00000002c0)='threaded\x00', 0x9) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffe45) r7 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x54000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00memovy '], 0xda00) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0xf543c716ab2faaf6, 0x2) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x4) mkdirat$cgroup(r10, &(0x7f0000000300)='syz1\x00', 0x1ff) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20) r12 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x7fffffff, 0x101, 0x8be6, 0x0, 0xffffffffffffffff, 0x8, [], 0x0, r5, 0x2}, 0x3c) 00:01:18 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x2, 0xfffffffffffffff8, 0x2, 0x0, r2, 0x1d74, [], 0x0, 0xffffffffffffff9c, 0x4, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0, 0x0, 0x7}, 0xfffffffffffffef7) r5 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$cgroup_type(r5, &(0x7f00000002c0)='threaded\x00', 0x9) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffe45) r7 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x54000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r8, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00memovy '], 0xda00) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0xf543c716ab2faaf6, 0x2) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x4) mkdirat$cgroup(r10, &(0x7f0000000300)='syz1\x00', 0x1ff) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20) r12 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r12, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) write$cgroup_int(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x7fffffff, 0x101, 0x8be6, 0x0, 0xffffffffffffffff, 0x8, [], 0x0, r5, 0x2}, 0x3c) 00:01:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5460, 0x0) 00:01:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:18 executing program 1: mknod(&(0x7f0000000340)='./bus\x00', 0x3a0914c44f7b802d, 0x501) acct(&(0x7f0000000080)='./bus\x00') execve(0x0, 0x0, 0x0) 00:01:18 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:01:18 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x6) 00:01:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 00:01:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 843.559015][T23370] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:24 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000196cf5abed79ade3fe82e821bf457983cd2f299d21d1f0fe5cfb51cb7ff50ef419d4d5d4b941e7b1a73a7563602a9954d01e9f377d43a5053e2ffdd8"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x0, 0x1}, 0x3c) 00:01:24 executing program 1: semget$private(0x0, 0x4, 0x0) 00:01:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xdfb103866148c34b) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) accept(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 00:01:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) 00:01:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000), 0xc) 00:01:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 849.534009][T23382] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:24 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x1000001ffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, r6, 0x0, 0x1000001ffffffff) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000740)) socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x4, &(0x7f0000000a00)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000680)="5baa5f539ca33a0992c130592f3b8385a49ca9d4386caed861c1bcee1fcecb886105635be7c5323781f68aa97c119eb0edfbcc7787cab8c8f49f67a013af52db24f3814a105f2df8b27a672780bd6606dce7f7eff122f9fec4baebc751688ecbd0b41e4e9a6c5a54bb610b5c15fc8b5af3c276505079774359523ae46ec97acc23645a3af854eed856ad3da113fd94fefec6aa733933ccba3baca4984e50c4f6f3361659534d34e3f04b3e08170f54392c36", 0xb2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000007c0)="871541902e039bc5e4b02e1976f85b20bbbbe1fe90585356363cfc6504865de9a07b6c962da1777a116cd43db43201cf3d83311a20736e5630b8b5f1b112de348b1b95dae5e97574a3eb1e0e7f1c72701c0a96f47e35fec80006a021e7412920a090e0d607f64bfe2be38bff8b90ec1ba34d8e", 0x73}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x11, 0xffffffffffffffff, &(0x7f00000008c0)="6910dfc474acf44ac85634a2", 0xc, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0xb, 0xfa, 0xffffffffffffffff, 0x0, 0x0, 0x100000001, 0x0, 0x1}]) 00:01:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) 00:01:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:24 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)) [ 849.727695][T23397] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) syz_open_dev$dri(0x0, 0x0, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x0, &(0x7f0000000240)) r3 = socket$alg(0x26, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0x8) tkill(r1, 0x39) 00:01:24 executing program 4: capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 849.872787][T23403] devpts: called with bogus options 00:01:31 executing program 0: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 00:01:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8970, &(0x7f0000003040)={'bridge_slave_1\x00', {0x2, 0x0, @loopback}}) 00:01:31 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x1000001ffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, r6, 0x0, 0x1000001ffffffff) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000740)) socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x4, &(0x7f0000000a00)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000680)="5baa5f539ca33a0992c130592f3b8385a49ca9d4386caed861c1bcee1fcecb886105635be7c5323781f68aa97c119eb0edfbcc7787cab8c8f49f67a013af52db24f3814a105f2df8b27a672780bd6606dce7f7eff122f9fec4baebc751688ecbd0b41e4e9a6c5a54bb610b5c15fc8b5af3c276505079774359523ae46ec97acc23645a3af854eed856ad3da113fd94fefec6aa733933ccba3baca4984e50c4f6f3361659534d34e3f04b3e08170f54392c36", 0xb2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000007c0)="871541902e039bc5e4b02e1976f85b20bbbbe1fe90585356363cfc6504865de9a07b6c962da1777a116cd43db43201cf3d83311a20736e5630b8b5f1b112de348b1b95dae5e97574a3eb1e0e7f1c72701c0a96f47e35fec80006a021e7412920a090e0d607f64bfe2be38bff8b90ec1ba34d8e", 0x73}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x11, 0xffffffffffffffff, &(0x7f00000008c0)="6910dfc474acf44ac85634a2", 0xc, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0xb, 0xfa, 0xffffffffffffffff, 0x0, 0x0, 0x100000001, 0x0, 0x1}]) 00:01:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8936, &(0x7f0000003040)={'bridge_slave_1\x00', {0x2, 0x4e21, @loopback}}) 00:01:31 executing program 4: capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000000140)="0100358a", 0x4) 00:01:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 00:01:32 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x1000001ffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, r6, 0x0, 0x1000001ffffffff) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000740)) socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x4, &(0x7f0000000a00)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000680)="5baa5f539ca33a0992c130592f3b8385a49ca9d4386caed861c1bcee1fcecb886105635be7c5323781f68aa97c119eb0edfbcc7787cab8c8f49f67a013af52db24f3814a105f2df8b27a672780bd6606dce7f7eff122f9fec4baebc751688ecbd0b41e4e9a6c5a54bb610b5c15fc8b5af3c276505079774359523ae46ec97acc23645a3af854eed856ad3da113fd94fefec6aa733933ccba3baca4984e50c4f6f3361659534d34e3f04b3e08170f54392c36", 0xb2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000007c0)="871541902e039bc5e4b02e1976f85b20bbbbe1fe90585356363cfc6504865de9a07b6c962da1777a116cd43db43201cf3d83311a20736e5630b8b5f1b112de348b1b95dae5e97574a3eb1e0e7f1c72701c0a96f47e35fec80006a021e7412920a090e0d607f64bfe2be38bff8b90ec1ba34d8e", 0x73}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x11, 0xffffffffffffffff, &(0x7f00000008c0)="6910dfc474acf44ac85634a2", 0xc, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0xb, 0xfa, 0xffffffffffffffff, 0x0, 0x0, 0x100000001, 0x0, 0x1}]) 00:01:32 executing program 2: r0 = getpgid(0x0) getpgid(r0) 00:01:36 executing program 0: socket$packet(0x11, 0x0, 0x300) dup(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 00:01:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 00:01:36 executing program 2: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x2, 0x1bd, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x11f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x49c}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0xbb618b5c1b2cafab, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000480)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x107100, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x2}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141442, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20019}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000c34bb4ea804976690a1825bee4e7ab93be76853307efe4e90f3a33b30d5d57ae28bc456c5b460556b77cc569e4524e523faf92e547beedb98897fd6cefc4dcc62c167d1f715c9ece9faa925d7152f39f63b06ffe97b9f20f7ddf56585b3a72896e999cafaa823d093b71cde26be7268bbc1d04b2cb68", @ANYRES16=r6, @ANYBLOB="48012dbd7000fcdbdf25100000001c0007000c00030001000000010000000c000300ff070000000000004800010044000400200001000a004e2300000100fe8000000000000000000000000000bb02000000200002000a004e2000000004b2d16a4c2a93e792f06fa995907b0eb518452d4c4400050014000200080001001800000008000300020000000800010065746800140002000800040006000000080001000600000008000100756470000800010075647000100001000c000200080002000000000020000600040002000400020004000200080001000180000008000100ff000000"], 0xec}, 0x1, 0x0, 0x0, 0x8000000}, 0x890) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000100)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r8, 0x5204, &(0x7f0000000440)=0x4) sendto$inet(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r9 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) ftruncate(r9, 0x4000b) sendfile(r1, r9, 0x0, 0x10010000000002) 00:01:36 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x1000001ffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, r6, 0x0, 0x1000001ffffffff) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000740)) socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x4, &(0x7f0000000a00)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000680)="5baa5f539ca33a0992c130592f3b8385a49ca9d4386caed861c1bcee1fcecb886105635be7c5323781f68aa97c119eb0edfbcc7787cab8c8f49f67a013af52db24f3814a105f2df8b27a672780bd6606dce7f7eff122f9fec4baebc751688ecbd0b41e4e9a6c5a54bb610b5c15fc8b5af3c276505079774359523ae46ec97acc23645a3af854eed856ad3da113fd94fefec6aa733933ccba3baca4984e50c4f6f3361659534d34e3f04b3e08170f54392c36", 0xb2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000007c0)="871541902e039bc5e4b02e1976f85b20bbbbe1fe90585356363cfc6504865de9a07b6c962da1777a116cd43db43201cf3d83311a20736e5630b8b5f1b112de348b1b95dae5e97574a3eb1e0e7f1c72701c0a96f47e35fec80006a021e7412920a090e0d607f64bfe2be38bff8b90ec1ba34d8e", 0x73}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x11, 0xffffffffffffffff, &(0x7f00000008c0)="6910dfc474acf44ac85634a2", 0xc, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0xb, 0xfa, 0xffffffffffffffff, 0x0, 0x0, 0x100000001, 0x0, 0x1}]) 00:01:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x0, 0x0, @dev, @dev={0xfe, 0x80, [0x2]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0x5a]}) [ 861.115587][T23454] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:01:36 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @random="e2705bb60689", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @broadcast}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6bf848", 0x0, "16e6d8"}}}}}}, 0x0) 00:01:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:36 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000740)) socket$inet6_udplite(0xa, 0x2, 0x88) 00:01:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 861.327554][T23469] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x1c9c380}, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) [ 861.410413][T23474] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 861.426821][T23450] syz-executor.2 (23450) used greatest stack depth: 51328 bytes left 00:01:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180), &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:42 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:01:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff4e, 0x0, 0x0, 0x0) 00:01:42 executing program 3: syz_usb_connect(0x0, 0x17e, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000c3926420868088018f46000000010902360001000000000904d80004131aaa0009050800000000000009050700000000000009058700000000000009058d000000000000"], 0x0) 00:01:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:01:42 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000740)) 00:01:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180), &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 867.514156][T23495] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:42 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000040), 0x12) syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 00:01:42 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000c40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000008000000ff000000000000000000000000000000000000000000c10182090000000100000000000000000000000000020000090000000000000000000000000000000000000000001500c20c200000000000000000c978ea6ebc46f499f90507bb56209baf93fc2732d83ca1d66388aac451e720799266e4852890ecb5f3a9d5a79aa413e8361aef1d8e6cb876d4c053fdd8ec055ce5013af2c8b4427473e044bf27d36211d96a8cda4024a2d0ef1432a6fc54070000004861d405b62d2fc58e9ceeb9ec934eb0fc5159caa1a5"]], 0x2) [ 867.641552][T23504] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180), &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) [ 867.752279][T23511] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 867.782445][T19708] usb 4-1: new high-speed USB device number 19 using dummy_hcd 00:01:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:42 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) [ 867.879799][T23518] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 868.022098][T19708] usb 4-1: Using ep0 maxpacket: 32 [ 868.142078][T19708] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 868.152025][T19708] usb 4-1: config 0 has no interface number 0 [ 868.158193][T19708] usb 4-1: New USB device found, idVendor=8086, idProduct=0188, bcdDevice=46.8f [ 868.167372][T19708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.177241][T19708] usb 4-1: config 0 descriptor?? [ 868.225550][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.234272][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.242672][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.250978][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.260719][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.269108][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.277477][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.285785][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.294248][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.302598][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.310904][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 868.321822][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 868.329642][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 868.338069][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 868.348412][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.356799][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.365193][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 00:01:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)=' ', 0x1, 0x4000002, 0x0, 0x0) [ 868.373562][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.381991][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.390337][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.398730][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.407147][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.415561][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.423952][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.432276][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 868.432366][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 868.450986][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 868.459349][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 868.469702][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.478137][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.486682][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.495187][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.503554][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.511914][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.520356][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.528736][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.537141][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.545498][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 868.553868][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 868.564890][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 868.572802][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 868.581229][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 868.591462][T19708] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 868.598641][T19708] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 868.606602][T19708] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 868.613312][T19708] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 868.629835][T19708] usb 4-1: USB disconnect, device number 19 [ 869.251897][T19708] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 869.491887][T19708] usb 4-1: Using ep0 maxpacket: 32 [ 869.613656][T19708] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 869.622059][T19708] usb 4-1: config 0 has no interface number 0 [ 869.628309][T19708] usb 4-1: New USB device found, idVendor=8086, idProduct=0188, bcdDevice=46.8f [ 869.637661][T19708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.646960][T19708] usb 4-1: config 0 descriptor?? [ 869.695340][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.703791][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.712185][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.720512][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.728911][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.737456][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.745860][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.754148][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.762524][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.770799][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.780638][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 869.791531][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 869.799370][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 869.807733][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 869.817965][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.826298][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.834574][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.842986][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.851231][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.859588][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.867872][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.876194][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.884475][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.892928][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.901199][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 869.911985][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 869.919729][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 869.928061][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 869.938303][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.946982][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.955251][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.963800][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.972098][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.980334][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.988669][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 869.996959][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 870.005285][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 870.013599][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 870.021948][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 870.032734][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 870.040483][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 870.048809][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 870.059007][T19708] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 870.066116][T19708] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 870.073980][T19708] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 870.080572][T19708] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 870.092670][T19708] usb 4-1: USB disconnect, device number 20 00:01:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240), 0xc, 0x0}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 00:01:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 00:01:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:49 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x7, 0x1, 0x1000, 0x0, 0x7fffffff, 0x5, 0x4, 0x7, 0x7, 0x40, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x3, 0xe2d, 0x0, 0x1, 0x0, 0x0, 0xaa9, 0x100000001, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x1, 0x8, 0x1ff, 0x6, 0x1000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) 00:01:49 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a3443f", 0x0, "fd1b0b"}}}}}}, 0x0) 00:01:49 executing program 3: syz_usb_connect(0x0, 0x17e, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000c3926420868088018f46000000010902360001000000000904d80004131aaa0009050800000000000009050700000000000009058700000000000009058d000000000000"], 0x0) [ 874.769445][T23537] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 00:01:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:49 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x6, @random="789e6769bf7b"}, 0x6, {0x2, 0x4e23, @rand_addr=0x1}, 'dummy0\x00'}) 00:01:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) [ 874.924007][T23549] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:01:50 executing program 5: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x0, 0x0) 00:01:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 875.033995][T19708] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 875.292816][T19708] usb 4-1: Using ep0 maxpacket: 32 [ 875.412239][T19708] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 875.420578][T19708] usb 4-1: config 0 has no interface number 0 [ 875.426977][T19708] usb 4-1: New USB device found, idVendor=8086, idProduct=0188, bcdDevice=46.8f [ 875.436158][T19708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.445614][T19708] usb 4-1: config 0 descriptor?? [ 875.485338][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.493911][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.502360][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.510766][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.519144][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.527448][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.536619][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.544965][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.553325][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.562029][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.570313][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 875.581227][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 875.589085][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 875.597445][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 875.607716][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.616119][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.624580][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.632926][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.641146][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.649493][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.657860][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.666336][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.674729][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.683144][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.691442][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 875.702278][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 875.710090][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 875.718464][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 875.728781][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.737170][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.745466][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.753814][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.762120][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.770339][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.778681][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.787052][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.795381][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.803713][T19708] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 875.812092][T19708] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 875.822895][T19708] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 875.830646][T19708] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 875.838978][T19708] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 875.849188][T19708] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 875.856317][T19708] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 875.864190][T19708] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 875.870739][T19708] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 875.882954][T19708] usb 4-1: USB disconnect, device number 21 00:01:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'ifb0\x00'}) 00:01:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080), 0x0}, 0x20) 00:01:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:56 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x1000001ffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x1000001ffffffff) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 00:01:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 00:01:56 executing program 3: mknod(&(0x7f0000000680)='./bus\x00', 0x80008000, 0x801) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 00:01:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 00:01:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:01:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 00:01:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8970, 0x0) 00:01:56 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0x1000001ffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x1000001ffffffff) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) 00:01:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, 0x0, 0x0) 00:01:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 00:02:00 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x0, &(0x7f0000000000), 0x0, 0x0) 00:02:00 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}], 0x492492492492331, 0x0) 00:02:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) 00:02:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, 0x0, 0x0) 00:02:00 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, &(0x7f0000000140)=""/23, 0x236) 00:02:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff08", 0x0, 0x100, 0xf2ffffff}, 0x28) [ 885.532570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 885.539001][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 885.545659][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 885.552036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 885.558649][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 885.564980][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:02:00 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0x1000001ffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r5, r4, 0x0, 0x1000001ffffffff) 00:02:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:02:00 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) syz_open_procfs(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) [ 885.932421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 885.938746][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:02:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:02:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000100)={0x6}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x5, 0x10004000}, &(0x7f00000001c0)=0x1228, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x2}}, 0x10) r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf", 0x8e) sendfile(r0, r1, 0x0, 0x666d) sendfile(r0, r1, 0x0, 0xa195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @broadcast, @local}, &(0x7f0000000700)=0xc) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1e0}}]}, 0x34}}, 0x0) 00:02:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd\x00\xa9:\xb3t\xca\xbf\xa2\xe0\xf8\xfd\xfb\xb9\x12\xfcT\xf5\x80\xc0\x8f\xff\xc7\xfb\xee\"\xa1\xff\x87\x87x\xd9\x0f\xa7\xbe4o\xc0\x82\x98\x94\xe4\x9c\xaf\'_L\x05\x02-\xfd\b]\xbe\b\x00\xb9\xc7\xe6\\\x98\xec[V_\x04Q\x869\xfdk\xe1\xf5M\x93\xef\x1a\xfb\x9ad]l\x93\x11\xe6O\x19;7f\x99\x8b\xa6\x0e\xcc\x8dw\xa1\xdb\xbc\x93\xa6i\xc1Xu\\\xf2V \n\x1c\xa0pM\xec5\n,\xe9?\xce\xbf\xb2o\xd5`\xba\xf9\xff\xa3\x88\xbf\x1b,S>\x9d\x90\x9f\xfd\xbc\xbe6i\xe5 \x9b\xb6\x99\xbb\xee#?\x81D\xcf\xe14\xdc\xec\x9a\xb7\x00\xe6\xdc\x1a\x83\xc0&\xc95\xc6%\xa3\xb8\x82 y\xcf\xcfz\xd2\x88\xa2,y\xbaE\xc4\x81\xa4Fn\x8c\x8c\xa1\an\xdd\xc9_\xb9\x11o\xe64\xdd9\xfa\xf0\xa3\xc9\xd2A{?>\x1e\x0e\xce\x99\xaa\x17`*}\x84\x8b\x1a\xd3o\x1d\x97\x83\xaeN-\x19\x15\x9b(\xb9\b\xce\xe3V\xd3E\xee\f\"\xb0\x88\x86m\xcdq4\xc6\xa1\xca\x8e`\x9d\xeac\x1f\xb0w\b\xaaX\x98\xd1[\xc7k\x00\x11\x8e#\xd8\f\f\xe13S\xd9?5K<\x13\x91\xf1\x8a\xc8\x12\xc8\xe1\xbc\x88\xcan\xb2\x04\x18\"\xd1Lg\xd1\xdb\xd3}\xab\x06\xd5\xad\x19\x9aCs+\xb6F\xae\xa5jn\x8f\xae\xa5\x87`\x04=+\x8b,Gr\xfcuh`\xc0\xfe\xdb Z\"\"[\xd30S\xf2\xc7\xf2@\xd9{\x8b&7\x84n7SCf\xa9\\\x18d\r\xdd\xbe^\xb8\xd8\x03Fi^\xe5a/\xba\xe9{\xcc\xea\x7f\x84b\x01\xda\xa1\xee+\xd2\x89\x02\x9d\xb5e>\xbe\x15\'s\xb9^\xd6{\xdb\xa2\xb5\xd3\fdC1\xb6\xdf\v\xae\xa3\xff\xaf);W\xe0\xb9X\xcbv\x0e@\a\x10\xc38l\x82r(\x19\x80\xc6\x83\xefT\xd1Xz-\xf2\xef\x9a\x14\x03\x86\xe5\xcc\xba|+\xd8\xb4\xda\xf6\x9a') fchdir(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 00:02:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8943, &(0x7f0000003040)={'bridge_slave_1\x00', {0x2, 0x0, @loopback}}) 00:02:04 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0x1000001ffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) 00:02:04 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={[], [], @broadcast}}, 0x14) 00:02:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:02:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:02:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="39000000130003006900000000000000ab008048060000004600010707000014190001401000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 00:02:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 00:02:04 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0x1000001ffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') 00:02:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0}, 0x0) 00:02:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:11 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000b440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)='\n', 0x1}], 0x1}}], 0x1, 0x0) 00:02:11 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0x1000001ffffffff) 00:02:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0}, 0x0) 00:02:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setfsgid(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:02:11 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 00:02:11 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000001ffffffff) 00:02:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x800, 0x91, &(0x7f0000000180)=""/145, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:02:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0}, 0x0) 00:02:11 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000001ffffffff) 00:02:11 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:02:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x2}}, 0x0) 00:02:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xa) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:02:17 executing program 2: r0 = socket$inet6(0xa, 0x800040000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fc}]}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="dd505a0a7682baf6e69f7b80beff30ff828a16bec26abfa13601c2e8bfca16878e3a85d0a77e6d253bf78da956487d167e174052eb99fbde45eb623899d0d3934038a7926d7bbdaead02a2a755f1e0d262d076a9d112dc048c2b0f990b71a64da066916934178820b506b6c616754afa509d605165102cdd465f4e770ff288d18c29ee241024238d24e8efce5b665ed6afa4badc82704478ad172679fe6761445e812b6ef9e46318", 0xa8}, {&(0x7f0000000240)="d8912f7f16f2fbf14184246ea725f1cf4424d043b6ef84c3db00b8c2626e4f70d4dd321d6d3774ae2a0221c1212f5f4fcf5464dc7dfb7e4ca9000994bf75c948c6c4f0e15797e272393bcfea7583f2eaf9dd3d30f5a21c2cb3eaaaaa929dfd832ef37664efc4a8b8adb1f652600931024cf856466683b6bb5f5d6d5c74a752dc44808e2d841a15ed7944fd2a106ee26812d288ed4702e1c4599e8f47478c121659f83ef5b84708d637e5918432e0abf4d7a08270655d5b1e182b760474fca83e91e971a4a7654a46aa1820e8dafd13bd88ea1af35f6535", 0xd7}, {&(0x7f0000002340)="aecbde65124de42828f2f4678d62ca33b3775ed0c2f6012cde91b48adfb931b9761263bde323f4bbd15c61b80abdb231197fb1584fcc5b7dbe2057af28b3e0aaa3117e0b9f89366287b0072620ee738b41defc12a4829b43db8776fcef5e5b705efea88cc9442f71d3b64d6baf8d37c28c759fb7eaf5e12beccabdb0c991a884a9dbe7b045cc4347e8808c393185dfb236e18e799e63eb25c9b9afbbad3d650dd296c8eecd03ccdb325f15bfd1cd0869170eb9a04dbddb04cd56dc12cbd44e830cdd4ebae9ca69eb2464b47763dc027a7ea46c2b5430e4f862e6d209a2124db9a0876bd25b2cb2d6d082f3f07319e182eb183b75be90fe5bfff833e2ea1bed29854623d28abd14d167317277a688b4ad3b8c10cac74ae7b5fbbc332d0e20cf45f062246073694cf30cb0f38500888a44957b9e8ecd7c2f65621efdc84973f1cab93935b70f16e2d1c8b971f40f7918f1d68158dd5a179828ea593d301444fe97afcf02e40272de01a2b1361ab7cce0ccb4d6abc0b2434297d21715cf971e871c25a58ed58fc28711aa03bdb8a20b16cdf25001d97f89f0148a9e7011fd0c8598749950deea72411e4236f1236ad83f87cff4c5273d9c5830b7af5a940b7bcd12fdd78482e91481cbe525edbe8505101d6d816140a5e3a8a61c1a07d0a416c7ac2411416aae82235a5c52aa7bc150c4440b00919cd4a825081d3605a9acd3774fdf60bf8e5203108d89841248cf6460eb5396b4063a9d909cbeae33543bff2743f5821923e1214225aab4043b03450660c92342d0544a0ace64720e4fa418b401480a7847cc5f66a00a0984480ef38c12b3943649749801fdc5271fa7bd24b9c7bcb5e66a2b3f3fc11bdfc0cb93de77b10e0d9fc4db049ebc92563b16d4e98557de17948fe4a6ff13f434cf1f8c494fa09bd6fedea2eb40463102b3e66c83b5b9df705ca162b5ec78c491c490ff7098c67671acf46185b61ca6b833e082c5489d8578808f6b6d0d2be7051a0a22433e5a889d8e6e78cb3f6d96a3d6b74f2d89b9f85532a60ce82a9026a953385684c9fe8eb38adfce9aa7ed130b0d58b8275e96dbd3ef5ea0a083576733f5d777b53d8e5d98000d4b2d07dee36597de1c1ee76cc9a1509ed0a389b501722697313e7aa5e762ae6d54c519a50c7cbda64d51ffa6e834f59efd0721da5157638269859ba01a848036d8cbba65993dec6e64fc1c1158d666c1078869692f379ec53071d2f554cd7faeb412f43b7e4f0ccfeb62236814336e132e27f7ab6d86dc3c9f5f2d1ad37da5610c130c6132f1fd19937e1408dad08e0df584bc08ffa2f7c26084748b3a374eb6b8fbded7d102c1d8d4fe0747957955ae67408658cedcd3eaac6291fc73313832d2ae05e042fcd5b128a95f630016731e3100dcea71545c78c265fb7b0af92eb230fdfcb42f96bb5045db1d3e97de91755210b8ea23042f7731f7ae2d8aa0fa2dfbf8d13b06c2c7015344c83a65e21bea21cdf9ed04d1231ce32c3b55ee2ae1f681784aa6cf0843cbaef8eb9eb629cc5df0781f75f8b7f87ff611960aa77ad0ca46220f3e1057010f55e0d57b00d912d23ae95844eaac86bcd3c4e870a80ddca15e97252718638bdac557b5c7786ef160cff7389eef828a1015f1c3ec8b5603c35d38f65c1e7cd68055546176254bc472c172b3176bb6390c0c1f91c79d111a02a5f68282301e49b4e7194c314121a179f5f8bdfab792cd54b74caf1655353d31b205fd19af0af3a8d431ba701307c01cd9d1c1f914111b61fb784afb3afef5150971460dec243ac8fb771edaec669a90681d76c146f326bac1dda194af43d3f3fa082c5ea356e5b13d799534a50a2f669a0823b84021cce945919f50d8f45093b5613b8f90da89724a6ce634aa20d1eedeac09704f2341995078f6795141099bf7986533810510b0a655a871de96d9706bca797672062e78c4936f321301e75dff42c73ba9818aa2daba30b111f8abad45e74c26993efbbc193ffd9c2a26dc4626e99d451bad29d8621498ac2181f401ca7f1347b481ff3f06f0f47bfaa5829d3d7cd84d5457259e082931ea9e03d2218b0e5fb2b9cee47926b90fa0fec1cf568cea333b49c362b9b7dab5c34ac4496c58aab16b9f8b479208014c8eedb969cc30e533f4ea112aafe0108125ccc80cea9ac67a45b0e3e79a4d700359113a1d538c46f547c308ccfbb8c925370d05f13a338061fb3b77419214ce760865de3c0214a0e865b415d3f593a4f59f674c138193914bace4ec534bd846", 0x64e}], 0x3}, 0x0) 00:02:17 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000001ffffffff) 00:02:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x2}}, 0x0) 00:02:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001b80)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:02:17 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) 00:02:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x2}}, 0x0) 00:02:17 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) 00:02:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:02:17 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) [ 902.572317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 902.578617][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:02:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) 00:02:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:02:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$void(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:02:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr="000000000000000000f34100"}, 0x1c) 00:02:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) 00:02:21 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x1000001ffffffff) 00:02:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/62, 0x3e) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r1) 00:02:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:21 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 00:02:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000280)=""/151, 0x97, &(0x7f00000003c0)={&(0x7f00000001c0)={'md5-generic\x00'}, &(0x7f0000000340)="d637daf087edf880d874d267b1c6d560ef6c7d7e493e795ff525abc90a6ed47da72a4661a94f3ce9a7c142d8a501225fbffc57d191097925561f69abf32b932d56d2d37ece8180", 0x47}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x400, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0x0, 0xba3051398ea574dd, {0x1, 0x0, 0x5, 0x3}}) fcntl$setflags(r2, 0x2, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x2d, 0x1652219627cc0636}) 00:02:21 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x1000001ffffffff) 00:02:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) 00:02:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) fstat(r2, &(0x7f0000000000)) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:02:21 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:02:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff"], 0x3}}, 0x0) 00:02:22 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:02:22 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:02:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff"], 0x3}}, 0x0) 00:02:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd82, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)=ANY=[@ANYBLOB="02120000020000004000f7ffffff007d"], 0x10}}, 0x0) 00:02:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:25 executing program 1: socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1f, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:02:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 00:02:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff"], 0x3}}, 0x0) 00:02:25 executing program 2: timerfd_create(0x2, 0x0) 00:02:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8921, &(0x7f0000003040)={'bridge_slave_1\x00', {0x2, 0x0, @loopback}}) 00:02:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b00"], 0x3}}, 0x0) 00:02:25 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xa) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="71e1beb9c8e69f240ffb4b2be8cd7aed", @ANYRESDEC=0x0], 0x24) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 00:02:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x8000, {{0xa, 0x0, 0x0, @mcast2}}}, 0x8c) 00:02:25 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000300)="b6cdbeed6b852ecbec19f3f5405d789ab59d14a2738aae337fc324dd73437e42e03eb72a244977c567e84afaaa06f4a5695a386dcf4c574949107ccd4fe1c6f97197c448d677ecd00564ba7fe6418ea4ee22c198ef66a2c2e83fbc22e91909d9e0ab555ef1b563b861ff", 0x6a}, {&(0x7f0000000380)="f64c77b91897ad99fe09b43b4c77df29c2a70182b3d25ff8fdad9e4b94d9734bf3f8bbbb7732a202e0a991e421ee421eaa566dcdad13070ea455254316bd9d1cc64ff45f4110dbb6799586ef9e96ab8eac10ceeac7dea4ef21784e0e0d158046c10f5e978fa9f6dcc99f46b4fd26eedf0a73c59b764b8fa25fe38172697075fc2a8c323869e5b9350721baf3a76843f3be2443580ad4adf2a0ba06a6219a6c23f0de93eef12973a39a5d278a952664b41a481c3fc86ef133ee9bce0a40c397ce9c6a5e5a471ef0197ec259e2749f6659bf12ed1cc91d910c851882adde644f6afdb6130292de62a79134c606dcfa02fb3a57", 0xf2}, {&(0x7f0000000480)="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", 0xe59}], 0x3) 00:02:37 executing program 2: r0 = socket(0x11, 0x4003, 0x0) r1 = dup(r0) sendto$unix(r1, &(0x7f0000000180)="b10005016000009005001b000700000026c604fecea10500fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be381e4991f7c8cf5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282108e4fd89720fd3abfbb770c1f5a872c881ea772ec5894303b22f310b404f361b1257aea8c500002002000000000000020208a371a3f800040000000000000001000000000f00"/177, 0xb1, 0x0, 0x0, 0xd4) 00:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b00000000"], 0x3}}, 0x0) 00:02:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b00000000"], 0x3}}, 0x0) [ 924.575122][ T5] kworker/dying (5) used greatest stack depth: 51224 bytes left 00:02:42 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") 00:02:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffae, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:02:42 executing program 2: socket$packet(0x11, 0x4000000000002, 0x300) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2f8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x7ffb}, 0x14) shutdown(r5, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004940), &(0x7f0000004980)=0xc) read$eventfd(r4, &(0x7f0000000080), 0xff97) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT=r2, @ANYRESHEX], 0x35) 00:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b00000000"], 0x3}}, 0x0) 00:02:42 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:02:42 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:02:42 executing program 3: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:02:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x2}}, 0x0) 00:02:42 executing program 5: syz_usb_connect(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/133) 00:02:42 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:02:42 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 00:02:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x2}}, 0x0) 00:02:52 executing program 3: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x201) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) write$hidraw(r1, &(0x7f0000001200)='\x00', 0xffffff45) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c6f2f98330ed01000000fca103b60006c52459a746b46de63d6a", 0x1a) syz_open_dev$evdev(&(0x7f0000000100)='k/\x00\xde\xff\xff\xff\x00\x00\x00\x00\v\xaa\x00\x06\x00\x00\x03', 0x7c2, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/inpu\x8f/event#\x00', 0x0, 0x2800) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) read$hidraw(r1, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_open_dev$evdev(0x0, 0x100000080000000, 0x1) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$evdev(0x0, 0x3f, 0xcf60b4bdab637b33) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000180)=""/145) syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0xc, 0x0, 0x0, 0x0, 0x0}, 0x0) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/../raw#\x00', 0x0, 0x2246) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r3, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x101200) read$hidraw(0xffffffffffffffff, &(0x7f0000001240)=""/4096, 0xbde2ae7d880f7e34) r4 = syz_open_dev$hidraw(0x0, 0x2, 0x80001) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x9, 0x1f, 0x7ff, 0x3ff, "26fa32aa5a49f53cf4179510665b9523bbb5a18cf5f134f845ccc17906e38cb1"}) write$hidraw(r4, &(0x7f0000001200)='\a', 0xffffff45) 00:02:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=""/44, 0x2c}}], 0x1, 0x40000040, 0x0) 00:02:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000001ffffffff) 00:02:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) read$eventfd(r0, 0x0, 0x0) 00:02:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x2}}, 0x0) 00:02:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000040)) 00:02:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000001ffffffff) 00:02:52 executing program 2: mknod(&(0x7f0000000340)='./bus\x00', 0x3a0914c44f7b802d, 0x501) acct(&(0x7f0000000080)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x300, 0x0) execve(0x0, 0x0, &(0x7f0000000440)=[&(0x7f00000002c0)='},\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='^\x00', &(0x7f00000003c0)='#[\x00', &(0x7f0000000400)='\x00']) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x10005, 0x0) writev(0xffffffffffffffff, &(0x7f0000002a00)=[{&(0x7f0000000440), 0xff52}], 0x1) 00:02:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x2}}, 0x0) 00:02:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000001ffffffff) 00:02:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:02:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xdfb103866148c34b) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) accept(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 00:02:57 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) 00:02:57 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="b6", 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) socket$inet(0x2, 0x3, 0x7f) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) r6 = socket$alg(0x26, 0x5, 0x0) io_submit(r5, 0x2, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000000c0)='Y', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r6, 0x0}]) r7 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x5d7, @remote, 0x1}, {0xa, 0x4e21, 0x4924ff26, @rand_addr="cf4c70af4ae11904abde45caf9273c04", 0x6}, 0x40, [0x3, 0x6, 0x7, 0xd2c, 0x3, 0x3778b7e9, 0x0, 0x9]}, 0x5c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 00:02:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000bc70000000000000950000000000000099e941a41bf864c78b07d9ffaefc3cbf11bc9031ba7a0af86bf4aa35339f6b382c4caf9db6fa7a9b85"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:02:57 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) 00:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) [ 942.092450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.098710][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:02:57 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000001ffffffff) 00:02:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:02:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xdfb103866148c34b) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) [ 942.572445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.578878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 942.585434][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.591698][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:03:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 00:03:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x0) 00:03:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x2d5, 0x0, @scatter={0x5d5, 0x300, &(0x7f0000000000)=[{&(0x7f0000000080)=""/193, 0xc1}]}, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) 00:03:01 executing program 2: pipe(&(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a02000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6342fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1e866a35e1ca1fbe96dd87235b44174f7c0343185089a0f119e31975e5515"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='c\xe7ro\xebSj\x010up.', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="6f7279207f482efc5017e3126dd9a1921a623e8c76b7978996d7a9d481173213418fffa0a903549d6276216abce11187ca4e3b0500000000000000048f7f6d54f0d1161e10c9e736740b83e0f5b95bce2291687b8466671502934057d896c3a92ee19eb7bafa56ca25df445706ebb4e277d95b9b94abf845b0d51ff638bb02fef3c0197c086820f533c6975860f7000000000000eee75220e263acc8250466321e"], 0xfdef) 00:03:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46600) write$FUSE_POLL(r1, &(0x7f0000000400)={0x18}, 0x401003fc000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 00:03:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:01 executing program 5: r0 = socket(0x18, 0x3, 0x0) shutdown(r0, 0x3) 00:03:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x0) 00:03:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x6c00) 00:03:01 executing program 5: semget(0x2, 0x0, 0x768) 00:03:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 00:03:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x0) 00:03:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000070000006700000000000f00950000000000"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x338, &(0x7f000000cf3d)=""/195}, 0x48) 00:03:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 00:03:05 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:03:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) 00:03:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:05 executing program 2: pipe(&(0x7f0000000300)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a02000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6342fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1e866a35e1ca1fbe96dd87235b44174f7c0343185089a0f119e31975e5515"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='c\xe7ro\xebSj\x010up.', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="6f7279207f482efc5017e3126dd9a1921a623e8c76b7978996d7a9d481173213418fffa0a903549d6276216abce11187ca4e3b0500000000000000048f7f6d54f0d1161e10c9e736740b83e0f5b95bce2291687b8466671502934057d896c3a92ee19eb7bafa56ca25df445706ebb4e277d95b9b94abf845b0d51ff638bb02fef3c0197c086820f533c6975860f7000000000000eee75220e263acc8250466321e"], 0xfdef) 00:03:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:03:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/18, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) 00:03:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 00:03:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/18, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:09 executing program 2: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0x29, 0x0, 0x0) 00:03:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x96x\x01\x00\x13\xba\xeb\x00\x00\x00\x00\x00\x8b\x17\xd9\x00\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000400)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:03:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0xee, &(0x7f0000000040)={@local, @random="24f8d595a1dc", [], {@ipv4={0x800, {{0x33, 0x4, 0x0, 0x0, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @rr={0x7, 0xb, 0x0, [@remote, @multicast2]}, @generic={0x0, 0xc, "bf682df574f80a28df57"}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [{}, {}, {}]}, @noop, @lsrr={0x83, 0x1f, 0x0, [@remote, @loopback, @multicast1, @multicast1, @empty, @empty, @dev]}, @timestamp={0x44, 0x0, 0x0, 0x0, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:03:09 executing program 3: socket$packet(0x11, 0x4000000000002, 0x300) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="021201000200dfffffffffffffff00009c6a5c38c11d6202436d41935c1d73e2e70f3813abcfb0b63d8273b566dba502da401e9fa7c0c5ba953d166d75088c19c4e75785520efe0fd4c163c9e57391cad929a88a471bb2dee94eacd7fca271"], 0x5f}}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="87b8f3cc6cd27be140f3b74c28bbaf6fa372dd77e4acdd2357868cab4c8517f778c6cbd500bbf499ed82b20625b532343805c04ad136fb1dde77eea13e53715d8ac1f1d09ad1a4636b4413fe1d0000000001000000e7476c29c26a928b3c6de7beb60e328b67978e707070fc01000000618144bec371845dc708d700a38e48654e7b37cb409fd54a57b8ab0f6c3dfb2b56737e06ab3960a3a90164686fcf98703f62b14b6284359bd83c93fe28f1cd820cfbddcd12fe552bedbb1b8d544e1375f1cc642201381bb0dbe76c3f8d38dfd41b14f61cfedcdb00000000767bac31591d9d7ace520427b94e1d7c16f4ed66c9f44324bd8621d2b986e6b309e5f701da75509ccf9f6558b4122f371083ce4547b9fa3e9ac08890ac8895806d000f693de9593f80434bc95b0001000000000000c4e308e2d8461e2dc40f01d1914811eb8d465e62e8985938f0af7e654ed7336b9fdee8f7c013b5c50eeba2862bb28fde16b49dd2b9dca704d35462e719f966b530ed64b7f1c41a3d4f5ce2a7334cb95f26eb551c2b2b2d9557cf20fb5c544c314e2141002f7abc23a9f435c84d10f5dadbc6a996e182740859983406e4e78c0bd19697abdd9ca78491f7774efe3231a525deaa836aa598a6bcf43fe70efe05e79a076fb1e0879a454667ae4616f0c1874bc9899f1091e2a7e29e02ca46c1044088b6ea548267233c341c3632a73853d43bd65b34ba5b6a455ebac2fa1473ae535c11893cdfd3c2385327784778281977f4aa5a0ca136c622fa2c689a68c76e053df75bcc6e2dc31d173833793fd64e7206e3bab58bacbbd9c0abd80ad3da52f5cea9aa119b36b88d175bb4917e0e98c60c9697ba1a7eb56db85332a3d9fa5af7e2fae64ac79f61fce5bbdf8cb87377961ac8bf4599c05398d7970eac2fae242b7aa6495466d4079a267e59774173edd82de9dcc5d0aceb996f712f5a037945faef432c5a16c53d261a7e7fca14014571ebe69c7570d1fd95ab1752b5a1de3c175069e74100b1a8a439d9f8f01cfba73981bff34ad567e7b0d1a72f5d8d7a7e4f1be18fbf799db388"], 0x2f8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x7ffb}, 0x14) shutdown(r6, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004940), &(0x7f0000004980)=0xc) read$eventfd(r5, &(0x7f0000000080), 0xff97) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT=r1, @ANYRESHEX=r4], 0x35) 00:03:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r3, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000080), 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 00:03:09 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x80, 0x0) 00:03:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/18, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:09 executing program 2: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x400080000, 0x106102) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:03:09 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x20) close(r0) getrandom(0x0, 0x0, 0x0) 00:03:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/19, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6087ffffffff}, 0x0) 00:03:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/19, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:13 executing program 5: madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x3fffe) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 00:03:13 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 00:03:13 executing program 2: pipe(0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lstat(&(0x7f0000001440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001540)={{{@in=@broadcast, @in6=@empty}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001640)=0xe8) stat(&(0x7f0000001680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001700)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) fstat(r5, 0x0) setresgid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getdents64(r2, &(0x7f0000000140)=""/4096, 0x1000) 00:03:13 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfa, 0x40, 0x3, 0x0, 0x0, 0x4a020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x600, 0x9, 0xfffffffb, 0x1, 0x0, 0x1, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) prlimit64(r1, 0xb, &(0x7f00000003c0)={0x1}, &(0x7f0000000400)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) creat(&(0x7f0000002680)='./file0\x00', 0x0) r2 = socket(0x1, 0x544e0935b9392a52, 0x0) sendmsg(r2, &(0x7f0000000380)={&(0x7f0000000200)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)="9166f8021e89228015533e4bd65d5f43db0bab9d0d6dde85e17993194d8df033ed6382d6521cf0de4db437d2120d5e7b3c8459cd5d031b4c", 0x38}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2134}, 0x0) 00:03:14 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 00:03:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/19, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}}, 0x0) 00:03:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000680)=""/246) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a5", 0x1, 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d345cda1530402b213c13253326eb29feda399e5e7c1512a76db93c4", 0x1c, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000280)=""/151, 0x97, &(0x7f00000003c0)={&(0x7f00000001c0)={'md5-generic\x00'}, &(0x7f0000000340)="d637daf087edf880d874d267b1c6d560ef6c7d7e493e795ff525abc90a6ed47da72a4661a94f3ce9a7c142d8a501225fbffc57d191097925561f69abf32b932d56d2d37ece81804b7e2cf96717102e0afd4ab5fe33462c6d398209db30dd3eb95062d74f7cc692ec1f", 0x69}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x400, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000540)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0x0, 0xba3051398ea574dd, {0x1, 0x0, 0x5, 0x3, 0x7fffffff}}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x2d, 0x1652219627cc0636}) 00:03:14 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000012c0)) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:03:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 00:03:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x4c}}, 0x20000000) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) accept(0xffffffffffffffff, 0x0, 0x0) 00:03:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6087ffffffff}, 0x0) 00:03:20 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) pipe2(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000080)={0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x11, 0x401, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}]}, 0x32}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:03:20 executing program 2: socket$packet(0x11, 0x4000000000002, 0x300) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x7ffb}, 0x14) shutdown(r6, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004940), &(0x7f0000004980)=0xc) read$eventfd(r5, &(0x7f0000000080), 0xff97) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT=r2, @ANYRESHEX], 0x35) 00:03:20 executing program 1: 00:03:20 executing program 4: 00:03:20 executing program 5: 00:03:20 executing program 1: 00:03:20 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000680)=""/246) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r1 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, 0x0, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x400, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x2d, 0x1652219627cc0636}) 00:03:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'vlan0\x00', 0x400}) 00:03:20 executing program 1: 00:03:20 executing program 4: 00:03:20 executing program 2: [ 965.452362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 965.459671][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 965.466386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 965.472742][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:03:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6087ffffffff}, 0x0) 00:03:26 executing program 1: 00:03:26 executing program 4: 00:03:26 executing program 2: 00:03:26 executing program 5: 00:03:26 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) pipe2(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000080)={0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x11, 0x401, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}]}, 0x32}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:03:26 executing program 1: 00:03:26 executing program 4: 00:03:26 executing program 5: 00:03:26 executing program 2: 00:03:26 executing program 4: 00:03:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') 00:03:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6087ffffffff}, 0x0) 00:03:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cp\x02\x00\x00\x00t.usage_user\x00', 0xea02ffe0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, 0x13, r1, 0x0) 00:03:30 executing program 2: 00:03:30 executing program 4: 00:03:30 executing program 1: 00:03:30 executing program 3: 00:03:30 executing program 2: epoll_create(0x0) syz_emit_ethernet(0x13e, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x108, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @ipv4={[], [], @broadcast}, {[], @gre={{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "21ee94fcede297a2a004d7832e70bf7de6fde9e9a0790b41f952301ab67647c5415f742ca0a640b18b87e6e01e82ad272ad4494dc5167d64321bc71720dbf050dcf0489477c16203b70fcc90e250c013f9d266c58e6be6f897f95d7ebf2ef8abb52626e7d136ef837319a05646b7e9daa913179bb8ae9377061ad20bb4534c55de0970fcb11b495c25cbce98664bfbd890d93ad2d17d9ecd7e7dfedd48bd99f314470e0c65a8d9a8b5fb2e05d8d8e73c04077ba9b8d1353352cfeadb591673478fbe4342"}}}}}}}, 0x0) 00:03:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a00401000000000000000000000000800120040000100000000000000000006051e7dabc56b523009000000000000e000000500000000060000000000020000000000000000f9ff0c20051d63da4f030001800000080002c70fee4394ffbbf000000000000000030005000000000002001d632b91c5200100000008000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 00:03:30 executing program 4: unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=ANY=[]}) 00:03:30 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) 00:03:30 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x9}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000b440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)='\n', 0x1}], 0x1}}], 0x1, 0x0) [ 975.913350][T24257] IPVS: ftp: loaded support on port[0] = 21 00:03:31 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x98, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty}, &(0x7f0000000280)=0x14) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x8, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000480)={{0x63, @remote, 0x4e20, 0x2, 'dh\x00', 0x13, 0x7fff, 0x42}, {@multicast1, 0x4e22, 0x5, 0x9, 0x0, 0x6a7}}, 0x44) write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[], 0xfffffffffffffe92) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000240), &(0x7f00000000c0)=0x286) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x2}, &(0x7f00000001c0)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$SO_TIMESTAMP(r4, 0x1, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$SO_TIMESTAMP(r5, 0x1, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x8010, r5, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000700)={@loopback}, &(0x7f0000000740)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r3, 0x16a}, 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000640), &(0x7f0000000680)=0xb) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/121, &(0x7f00000006c0)=0x79) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) [ 976.109122][T24257] IPVS: ftp: loaded support on port[0] = 21 00:03:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6087ffffffff}, 0x0) 00:03:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) 00:03:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @rand_addr="000000000000000085ee13a3142ffe68"}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") 00:03:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000300001010000c6e131b200000001000014000100101a010000000800030000000000009708df7d0af0f13c89fb273fb506e060f1d7fdfc9e049d6bd7617353f925e26b134e2c6e87c652186f546fa5a9378369d803674c64257cf036b942cdbeda636c1fd585bc76ee2ae5a106b5b9fba718ed1f37784950f8b8801a404f62e0d7c76defadac8f6a2e088bf14bb02ab9de1fcef9a214"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0) 00:03:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000001fde), 0x4) 00:03:35 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="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", 0xb1, 0x0, 0x0, 0x2abd8264) 00:03:35 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x86fb, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:03:35 executing program 4: shmget(0x0, 0x2000, 0x704, &(0x7f0000ffb000/0x2000)=nil) 00:03:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8202adfdffffffffffffff6530130fb9aa23d0571454d78a2a197a38620700000000829500000000000000003f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58b55c62bffa4d012ae447473c230495aaee48c02f6ac41e6bf3bf554799b9b800ed690df66bc98b68713ac9da7130a852beb85a85e25bfb258557d60f13ad30505e8f53f8a4afef9d612f871f4385f04157795ea4a5c59a3a9fa202361ca1d8cac7dbbc5b65c6593d2870b4122cd2350000"], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0xac) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 00:03:35 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fsync(r0) 00:03:35 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000005880)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000000000070000004410ff0700"/32], 0x20}}], 0x1, 0x0) 00:03:35 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr="1bcdcff08fbecccdb2c128abc4931e1e"}}}, 0x2eb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:03:41 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) 00:03:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6087ffffffff}, 0x0) 00:03:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9, 0x11, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) 00:03:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8202adfdffffffffffffff6530130fb9aa23d0571454d78a2a197a38620700000000829500000000000000003f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58b55c62bffa4d012ae447473c230495aaee48c02f6ac41e6bf3bf554799b9b800ed690df66bc98b68713ac9da7130a852beb85a85e25bfb258557d60f13ad30505e8f53f8a4afef9d612f871f4385f04157795ea4a5c59a3a9fa202361ca1d8cac7dbbc5b65c6593d2870b4122cd2350000"], 0x10) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0xac) setsockopt(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x2b) r2 = dup(r0) rename(0x0, 0x0) setsockopt(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xff7d) sendto$inet6(r2, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 00:03:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0xc5) pwritev(r0, &(0x7f00000003c0), 0x13e, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f00000015c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) 00:03:41 executing program 1: open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) symlink(0x0, 0x0) 00:03:41 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0xc5) 00:03:41 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffa4}], 0x1, 0x0) r0 = open(&(0x7f0000000480)='./file1\x00', 0x611, 0x0) fcntl$setstatus(r0, 0x4, 0xc0) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000000)='./file1\x00') 00:03:41 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, r0, 0x0) 00:03:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001300fbff00000000fbdbdf2533000000084080140079008fa54e391ee302f72c94be1c8c50cc470e0abe53dd0a3f39e7eb48558b3518798c41787c36d994300b32295c67a313369530da8d4952cc1549aef66fc4575807be6fd1e78330eda567516f506684b9ae704f2ed313283dcab675318c6e40bedb157c005f885c40749f31f765ebf96de7352b230ec63d7ff10e30c1b7ec73b4cf3af99928c62ac1ea57ddf0744a3dc5c4", @ANYRES32], 0x1c}, 0x1, 0x68, 0x0, 0x24004070}, 0x0) r1 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 00:03:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) pipe(0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, r0, 0x0) 00:03:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) write$FUSE_WRITE(r4, &(0x7f00000002c0)={0x18}, 0x18) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x40000000000006}) 00:03:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0D\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc80200, 0x0) 00:03:47 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x2, 0x0, 0x0) 00:03:48 executing program 1: r0 = semget(0x2, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f00000025c0)=0xffff) 00:03:51 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmdt(r1) 00:03:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x0, 0x829, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:03:51 executing program 5: r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000040)=@in, 0xc) 00:03:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffa888, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154001008178a800160003000100e558f000000002000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb53b409d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 00:03:51 executing program 2: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x4000000000000, &(0x7f00000001c0)=[@rights, @cred], 0x30}, 0x0) 00:03:51 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, 0x0, 0x0}, 0xfffffffffffffef7) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd", 0x3f}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) mkdirat$cgroup(r7, &(0x7f0000000300)='syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x0, 0x101, 0x8be6, 0x0, 0xffffffffffffffff, 0x8, [], 0x0, r3, 0x2}, 0x3c) [ 996.887982][T24416] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:52 executing program 2: r0 = socket(0x2, 0xc003, 0x6) connect$unix(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="8202adfdffffffffffffff653000463f7b238bf46854d78a2a197a386207000000008295955984c87910bf453f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799b9b813ad30505e8f5300a49fef9d612f871f4385f04157795ea4a5c5fe659fa202361cd8cac7dbbc5b65c6593d2870b4122cd2350000000000000000000000000000000000b3b90e648a32e2a1f6cad0810112eff4c0af259a6164fcbf6c5121b3293e65805f306d08d96e961166a4cf22fc99a55321142674495fe3b9e7d98231a8befd639ca8fa3fcb261fe05b25378ee11dcddf36535c3de03aacf86102e8e9c6c06595d7"], 0x10) write(r0, &(0x7f0000000040)="9e3eb3900603b73725c7419aab4230e8864fabe4f27242c9a88b86fab7ca2730619556ae0b655533", 0x28) 00:03:52 executing program 5: mknod(&(0x7f0000000140)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x5, 0x0) write(r0, &(0x7f0000000040)='g\r', 0x2) 00:03:52 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe(0x0) 00:03:52 executing program 1: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:03:52 executing program 4: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) write$nbd(r0, &(0x7f0000000300)={0x67446698, 0x0, 0x0, 0x0, 0x0, "e17d6c4298aeb2b8779cd05c6112c359e2d06bf8c829100cb23b60cd855b91d8e6479a5f84a0dafe9016645f51f062656c0d2e0946d48c395eb0234b60c9923f39866ea6a064dffec65c56c7e9a0f5c5f6b457ff8e1ef10b0b6902902cac5293755cbf8b9ba143ccd0a953f27bad677dfe4dddc2fff9a26a42d6c38cae19c892faa84dda6732fd99cfb2afc14bebc1c5bdbe4b1964c1fe619a0cc0fff31db2bdbc695ca638aa7ba63a64ba7d00000a1274000000000000000000"}, 0xffffffffffffffdc) 00:03:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0xd, &(0x7f0000000040)={0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 00:03:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:03:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) 00:03:58 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x2, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 00:03:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xf3872601862a9c90) 00:03:58 executing program 1: socketpair$unix(0x1, 0x100000000000002, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x1}, 0x6e) 00:03:58 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000012c0)={0xc, 0x0, "4aa43a37"}, 0x0) 00:03:58 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local}, 0xc) 00:04:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x0, 0x0, 0x51, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:02 executing program 5: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000003680)='logon\x00', &(0x7f00000036c0)={'syz', 0x1}, &(0x7f0000003700)='em0security\x00', 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) 00:04:02 executing program 1: io_setup(0x40000000000007, &(0x7f0000000200)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1c86ef9f9c712c71, r1}]) 00:04:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000590000006700000000000f00950000000000"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x338, &(0x7f000000cf3d)=""/195}, 0x48) 00:04:02 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) fstat(r2, &(0x7f0000000000)) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:04:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) pwrite64(r0, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) 00:04:02 executing program 4: creat(&(0x7f0000000700)='./bus\x00', 0x0) rmdir(&(0x7f0000000080)='./bus\x00') 00:04:02 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000100)=@ax25={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null]}, 0x80, 0x0}, 0x8659b4086a924344) 00:04:02 executing program 2: request_key(&(0x7f0000003680)='logon\x00', &(0x7f00000036c0)={'syz', 0x1}, &(0x7f0000003700)='em0security\x00', 0x0) 00:04:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) dup(r0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:04:02 executing program 5: socket$packet(0x11, 0x0, 0x300) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 00:04:02 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90x0}, &(0x7f0000b34ffc)=0xc) setuid(r1) setresuid(r1, 0xee00, 0x0) 00:04:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty={[0x2]}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdrdstopts={{0x14}}], 0x14}}], 0x1, 0x0) 00:04:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 00:04:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x96Z/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xb7>\xd6#\xe1^\xa5\xfb\xfe\x03\xf8\vH\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\x0f\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\xc6\x99\x01EtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xc6w\x8b\x81\x01\x00\x00\x00\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\n\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n N\xbc\xcf\x175cbR\xc8a\xe5\xde\x9ey\xf8T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe,\x01\xb9N\xb0\x96\xc0\xa7\xddko\x9d/R\x87\\g;\xbb\x97\x06y\xe3m\xf2Z%*\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(\xcd\xee\x80K\xd5~\x02`\x11\xed\xa6\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9f&\n\xc5\xa47\xb5\x8f\xb8y\xcf\'9\x86\xa3\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1\x82\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\xff\xe0\x1f\x87|G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\b\xc4h\xb2;\xa9\xc4\x14?fi\xf8\"|0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 00:04:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 00:04:12 executing program 1: r0 = getpid() perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 00:04:12 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x46000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0xb}, 0xb) 00:04:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xdfb103866148c34b) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5f531f003dc66054f3f5ef8ee31ba4aaa8037d5a86449bc435a2ac2c382f17281eddad1180d08865427bbba8a0b7ba01d6d8bd41b90ced41e485218a560356b52ad320d7232dd2ebfa28090a8a23529ea4ab2ba8624b497a3ac6b5ec2159719424b61aceebf384aa0c0206e4d189e437aaee39bb3c08689c22986dd577d962f91b894a97c083b352e39c08004771cdf96ef4a90bea95888ec03ecb01464f642f91c369dd5adabd9494149d4cf021397331e8784d85ee353c6e3b49082630d9d0587f7d9bed07373d1d74b9e126410918744d88ba0c40753ff99637f46eedc76d65962a6b22933aa5b7475af18b35a77628132e535e1d62d32f1a16009247df71e731506d648a178d0a7b7ed6727feb5e76c5fd117834c772ab064c737a9bea7d92b8f12c0cff9e717061fa4a2b9c6c7190a78a59ba23a42267fe353703432cd2d37a003b854e1c58b854fff2d864a10cc5fce95a65a47b02153bd3961cb261e8"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) accept(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 00:04:13 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 00:04:13 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x1, 0x2, 0x3, 0x3, 0xfff}, 0x8000}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x7) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup\x00\x1e\xa7\xd4\xea.G\x1c\x99\xa6\xb45\xfd\xbe\x80l(i\xe0\xda\x1e\xb5\x94\xf1y\xc8.\xe2c\xb8\xa0\xe8\xe2\xa2(\\y<;\xc1$<\x8c5B?1\xe3\xba\x96Z/\xf5\xce0\xc5\x86\xcf\xad\'v\xbe\xfb\xb6\x8e\xb7>\xd6#\xe1^\xa5\xfb\xfe\x03\xf8\vH\x92<~y\xc5o\xb7\'V\xc8\\fP\xc6\x12\vd\xf1\xf4N\xd6\x13\x8b\xf6I\x17p\x91\"!\x80\xa8=\xa1\xa0\xda\xbb\xae\xf4\x96\xfb\xaf\xdf\x06\xf4\x93\t3\x97\x17\x97\xa6\x0f\x9a\fT\x8e\x81`\xdd\xb3+\x17g\xcb\xcc\xd76H\xc9\xfa\x97\xe7\xe6\xa7)\x10\x17+\xc6\xb5\xb7\xe6\xe4P\x04*v=\x7f,\x1fB\x96?\xf0\\sE\xa8k\xfe\xef\xd0F\xdc\xbf,\xb2\x90\xc0\x86\x86WZ.\x02\xc2\xb4\xa6\xf31\xcc\xc1\xd9\rH\x93\x1a\xa7\xf1\xe4*\x9cl\x06\xff\x91!\b\x7f\xe4\xc6\xacWX\x95h\x94:6\x90r\x93_\xef(\x8f\ni\xb4\a\xa7\x15xF\xbb\xfasFo6~\xcc\x9ej\xa1\xb2X\x8e)?\xf5\xe8\xf2)\xb6\xc4P\x1f\xbc\xf1-4\x81\xf7\xaf\x02\x83\x05\"\xe7b\xc1\x15\xab\xa2\xc7\x8ei<\xde8\xe9MH:\xe9\xce\xe4\xa7l]\x9a\f\xef\x8a\xa8\x1e\xda\xf4\x92\\}d\xffnh%\xcf8\xf3\x84\x19\xbc\xcex\x13\xaa\xc2\xa6]\x1ck\bd\b\x15%\xb7\x107ra?\x8bI\xf4\xd7\xe6\xf5\xa8\x90\xab\xc9{[\xcc\xbe\x03Mi\x13\x03\x84,\x9d\xca\xcc\x85\xb1\xbf\x8b', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00\x10\xb9\x04\x00&K\x8d\x91\xd35\x00\x00\x00\x87<\xf5\x9b\xe7\xbf\xc8\xc6\x99\x01EtO\xcb\xf5\x8fm\v\xab\to\x1fw\"\x04\xac\x93\"\xa55C6g\x0f\xe5\xfdl >3\b\x93\x13\xbf\x11]\xe6\b\xf4\x8f\xdf\xfa\xbfW\xb3\xc4\x02\x14\xfc\x9e$\xcfS\"\x06\xee\xc1\xb8\xd6:\t\x97\x03\xa7.\xf9\xae\x06\"\a\xf7\xc6w\x8b\x81\x01\x00\x00\x00\xb0\xc0W\xb7\x10\x97\xba\xdd\x94\xfc\\\xe3\x15\x00\x10\x00\x007>\x1c\xf0\"Q\xe8n\xc9#~\x92KH\x1f!\xa6\x15\xb1/\x97\xe8\n\x0e\x11u\x89^\x03\xd4\xc0y7\xd1\xc4\xfbG\xe0b\x9e\t\x00\x00\x00\x00\x00\x00\xc6\x06\aPl\xef\x9c-U[\xd5\xe11n N\xbc\xcf\x175cbR\xc8a\xe5\xde\x9ey\xf8T\xf6\x88\xe7\vG\xf6\x8a\b$?\x90X:a\xcb\x94\x19\xdbqT\xfe,\x01\xb9N\xb0\x96\xc0\xa7\xddko\x9d/R\x87\\g;\xbb\x97\x06y\xe3m\xf2Z%*\xcc&\n\'v\x04\xbc6E\xfe\xa2\xb8k~j\xd1\x13\x1c\x03e\x90\x04\xc3Utck\x9e\x13;\x1a\x19\x97\xcb_\x92\x89.^\x81u\'Pd\xff!W\x12\xfac6*z\x82\xf1\x12#\xc2\xc6\xa5\x8a[\xf3\x96\x00\x87#\x01\xe6h\xf8\xa8$\x87)\x02\xb0\xbe\x832\x10\xdb]\xbc\x8b\x8ct\x06q\x0f\xe4c\x19/\xae%(\xcd\xee\x80K\xd5~\x02`\x11\xed\xa6\xf0\xff\xa1#\xf4\x9f\xcb\xc6\x9a\xc3\x13\xda%\xc1\b\xa4\xcb)t\xbd\xfe\xe8\xbbK^GqB(\xd8C\xf8\x1e\x9a\x06\xd0\xcd\x93\xc1$\xcb\xfe\x1ftO\x14\x9f&\n\xc5\xa47\xb5\x8f\xb8y\xcf\'9\x86\xa3\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\xce\xee\x96\xf7\xeff\xa9\xdb\xe7\xe7aCb\\\xf7TA\xd3z\xa7u\xa8\xac\x98\xa2\xe3\xe6\xc1\x82\xa3u\xfcx\xf1\x19\a@\xb2\xdd<\x04\xc7\xdb\x1e\xbb/\xee\x89E5r\xd9cy\xb8\x1cK;\xc8\x95w\xa2\xfdO\xf2\xab\x19\xd2<\f\xdeO\x1d`C\xc9\x97\x8f}\xa1\x05+\xca\xc1/\x0fl\xc0\xe9]\x03<\xb6\x00_\xff\xe0\x1f\x87|G\"\x8e\xe6\x1a\xe2\xd3\x1b\x059\"\x18\t\xeb\xaeL\x0e3\x1a\xe2Rz\xc2\xd0\xdc\xach\xceV\b\xc4h\xb2;\xa9\xc4\x14?fi\xf8\"|0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 00:04:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:04:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x18, &(0x7f0000000380)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, 0xe8) 00:04:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:04:17 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 00:04:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x6}, [@typed={0x10, 0xa, @str='\x18\x00\x00\x00me_type\x00'}]}, 0x1ae}}, 0x0) 00:04:17 executing program 4: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) [ 1022.175120][T24613] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:04:17 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 00:04:17 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000005c0000002500000019000a000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 00:04:17 executing program 1: syz_emit_ethernet(0x410, &(0x7f0000000000)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0xf, "50a09c", 0x8, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:17 executing program 2: r0 = socket$inet(0x10, 0x80002, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000037c0)=""/4090, 0xffa}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000040)=""/222, 0xde}], 0x7}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="4c0000001200ff09fffefd9567a283b724a600800000000000000068354046002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca63d89613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000780)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 00:04:17 executing program 1: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) [ 1022.377610][T24623] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1022.472469][T24631] IPVS: ftp: loaded support on port[0] = 21 [ 1022.507833][T24633] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 00:04:17 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="01388a9ed948077770721099898401b713757c137db6b7b942d80a8b7ed6ac1fd87dbb971e28dace", 0x28}], 0x1}}], 0x1, 0xe00) [ 1022.643716][T24633] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1022.667758][T24630] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1022.678270][T24636] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1022.708393][T24633] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1022.717143][T24633] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1022.745389][T24630] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1023.266618][T24637] IPVS: ftp: loaded support on port[0] = 21 00:04:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000200)="12", 0x7ffff000}], 0x1, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0) 00:04:21 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr="1bcdcff08fbecccdb2c128abc4931e1e"}}}, 0x2eb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\xed\xff\xff\xff\xff\xff\xff\xff'}) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x03\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 00:04:21 executing program 5: mkdir(0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x1, 0x2) 00:04:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:21 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321212e0f2bf8b05fb751f069430335c07a356443298afb7f5db5b487dfd1e7"], 0x10094) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000840), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 00:04:21 executing program 1: r0 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x101841, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 00:04:21 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 00:04:21 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0xe042e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800003, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 00:04:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001200050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) 00:04:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:04:22 executing program 5: mkdir(0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x1, 0x2) 00:04:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000018c0)={&(0x7f0000000340)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, @u32}, @nested={0x26c, 0x0, [@generic="a80a65230d0fa785a132675dd12475b27a515251b6961a88417ef8b586007c97fd067913437d791cd8ab6f97ae6c79549541371aee2457275994a43e4dac3f89d947160340896f0737b48560a78e01d2517c4ee8fcb0bc1624aed5d396c32f460ecdf000d08bdba8a55edfe23fa95fd77dd5b4e323f8600aa6933cb5c52af95f43f3cd6a182752620b4ca0fc2b44ceefc60ec453703bc25ea68dcb1c842dbc350962a9cf6d5830fb0fc1f64ba8e4c52ee89fd6cb44ddee6492af3ea9b56505800392409aada9d697d3b0bb7a9d29d3d53985844c033272e08d84b23668bb0d5278d2d9a7b42439d891", @generic="8b6aa1818102aa162c955326df2d70f53fe805833df50463461f9d2c4b885f93f7da184d9e7821e3f587ab294b3325a8ccc21fb9c3bd1dc85df37d543c25fcef6e4dbd7621a4c4fedd819a7ea52fae68c351c88dd4a7379c9f2d3aa94590b91f9156b8", @typed={0x8, 0x0, @uid}, @generic="aa32fd3f8745409afa0eeff2c3b86dacc085d003b54eb47eb688f1561290fef0b8d75de51b73c4423a972ef75350c1d0cbdc253b2d7ff3317950c1229337fcaeb93d0d3423b9", @generic="0e85cb57419be73fbd77dafc6bcec0a65cc6c0b6b7188d59728503f38d3ca710c97cca8313e6488080c3645c1e64eb1f7645635944c5dfd226bf3a65212471ab0c8e958b6f2e12d54d3c80aff9eab91fdb23967bee93db11bfbd175e1557c75e5e606c728a94459526a4288891232ac085902845d2828736c78a644b4cf5e38c5cd22df21b1725f644ff8448769615ee0935d109c060460b1f9fec952a822a5408c97a281b136ff9d66868253e4e02dc0cae35ad781405192a1b99e92e7693b727c86f", @typed={0x8, 0x0, @pid}]}, @generic="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", @typed={0xc, 0x0, @u64}, @generic="9cc6110b5534afc402beecadf26dfd1f55e32f", @nested={0x100, 0x0, [@generic="455929ef75d5d5d412fe3563eeeecf603beacbb04c526d01ea7c1a30114a696fcd41f243e40af7ad2e57d5e811bb49bafbdd103f066a1105cfe1d7533ef72ee2042071aca9cd34ded466e65a1f0e528a61b78f8a247228cba542870756e1fa1a20386b685ce68a4dc9d477d9ab39c5139337747d0e7fa7db84491797f00cab0ccd896d44ca3f5919c3471bf5de4f9489dfa2f185c4819504f5a90c583ab9212faf38c3575ea5eb85763c0396286765fe52005e2356815b9b51a22379281cd2870bb900615c8e1cccad87718293a7db1bfd3d0702a05a827defe6bbb99e58ce95847666e6565d9bce10cbee01a9ddfcd55d491ebb66fea07fb7"]}, @typed={0x8, 0x0, @ipv4=@loopback}, @generic="7a05c95ebb97edfce30d4b73540b0ebf044ba5b55d2b5d43b031459900865204ce894affb79079f613f834205c06deb1c9020cb4c2b03a2563057b0a82a14e4537ee86d04d36d7b0f5504497c52b824bc499cefd8c25db65f5acdf05a270e01b0aebc864dfad0d418f4cde4c71aabb61636c29f4dc11d535b26cfbe1f9729f8a4678405a1673824efbb39d0d004b29208e86cda507b331b49d5f2cba2f8ad6ad0fc6ee7922fb143e725a5a1dd0e5419fff56f3207ba584e20f1a5d88d9d8a3c9fda11f1664a022031374cec0", @generic="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"]}, 0xd04}}, 0x0) 00:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b707000001000000407000000cc1e9cacf7000000000000095000000000000007c41776586b2841fb71916411c22f93aedcd0efe455d0445fb70fc5b4e982e61aa7d1f9fb288ae1a7763bf71d619c1ba6e53657b8dc7c5bb722909be1e9d1b24998dc19eab7f8651b8ca20a6e7fae8bc5e5c45d8cfc8c516023ef5e245005b7e4570bb048d2e9ec9b5d29ab9e06bdb4144978fac3fba2eaa07058b52fb95eaa1837a312320fd387d1abcfb3e39c2d4ee7cf3000000000000000000000000000000e286217885f5"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x13, 0x0, &(0x7f0000000200)="bc4f0c3f69ddb10d28d098f118fa995ee7ee2b", 0x0, 0x100}, 0x28) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0xfffffffffffffffd, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg(0xffffffffffffffff, &(0x7f0000000140), 0x3f00) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdd1, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x80000001, 0xaa99, 0x8, 0x6, 0x65f, 0xd54}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(0xffffffffffffffff) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open$cgroup(0x0, r2, 0x2, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xffffffffffffff82) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) 00:04:22 executing program 1: r0 = socket(0x18, 0x2, 0x0) getsockopt(r0, 0x11, 0x0, 0x0, 0x0) 00:04:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:25 executing program 4: mq_open(&(0x7f00000007c0)='.+\x00', 0x0, 0x0, &(0x7f0000000800)) 00:04:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}) 00:04:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r1, 0x345a182b8533a977, 0x0, 0x0, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x3, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd8}}, {0x8}}]}, 0x44}}, 0x0) 00:04:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000080)={0x0, 0x2}) 00:04:25 executing program 2: io_setup(0x40000000000007, &(0x7f0000000200)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/\x00\x00\x00\x00\xb6', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1c86ef9f9c712c71, r1}]) 00:04:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty={[0x2]}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdrdstopts={{0x14, 0x29, 0x3b}}], 0x14}}], 0x1, 0x0) 00:04:25 executing program 5: 00:04:25 executing program 1: 00:04:25 executing program 4: 00:04:26 executing program 2: 00:04:26 executing program 1: 00:04:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:32 executing program 5: 00:04:32 executing program 4: 00:04:32 executing program 2: 00:04:32 executing program 3: 00:04:32 executing program 1: 00:04:32 executing program 1: 00:04:32 executing program 5: 00:04:32 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x4c0700, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x1008040) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x1}) 00:04:32 executing program 4: 00:04:32 executing program 5: 00:04:37 executing program 4: 00:04:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804}}, 0x14}, 0x1, 0x6087ffffffff}, 0x0) 00:04:37 executing program 1: 00:04:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000cc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 00:04:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000020000000000007000051", @ANYRES32, @ANYBLOB="dd3d1f240a0002002f"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 00:04:37 executing program 2: 00:04:37 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000020000000000007000051", @ANYRES32, @ANYBLOB="dd3d1f240a0002002f"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 00:04:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000040)={@multicast2, @dev}, 0xc) 00:04:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x10) 00:04:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x4c, 0x0, 0x0) 00:04:37 executing program 5: 00:04:37 executing program 2: 00:04:37 executing program 1: 00:04:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804}}, 0x14}, 0x1, 0x6087ffffffff}, 0x0) 00:04:42 executing program 4: 00:04:42 executing program 5: 00:04:42 executing program 3: 00:04:42 executing program 2: 00:04:42 executing program 1: 00:04:42 executing program 4: 00:04:42 executing program 1: 00:04:42 executing program 3: 00:04:42 executing program 2: 00:04:42 executing program 5: 00:04:42 executing program 1: 00:04:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2804}}, 0x14}, 0x1, 0x6087ffffffff}, 0x0) 00:04:46 executing program 4: 00:04:46 executing program 2: 00:04:46 executing program 5: 00:04:46 executing program 3: 00:04:46 executing program 1: 00:04:46 executing program 4: 00:04:46 executing program 5: 00:04:46 executing program 1: 00:04:46 executing program 3: 00:04:46 executing program 2: 00:04:46 executing program 4: 00:04:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x0, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:51 executing program 1: 00:04:51 executing program 3: 00:04:51 executing program 5: 00:04:51 executing program 2: 00:04:51 executing program 4: 00:04:51 executing program 1: 00:04:51 executing program 3: 00:04:51 executing program 5: 00:04:51 executing program 4: 00:04:51 executing program 2: 00:04:51 executing program 1: 00:04:57 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000196cf5abed79ade3fe82e821bf457983cd2f299d21d1f0fe5cfb51cb7ff50ef419d4d5d4b941e7b1a73a7563602a9954d01e9f377d43a5053e2ffdd8"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x1}, 0x3c) 00:04:57 executing program 3: 00:04:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x0, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:04:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480)) eventfd2(0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1, 0x6}, 0x100010014, 0x0, 0x0, 0x442, 0x0, 0x42cf6d26, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0xffff}}, 0xa0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=@v3={0x3000000, [{0x8, 0x1}, {0x0, 0x71f40d98}]}, 0x18, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000005, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r8 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r8, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) 00:04:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r2}) 00:04:57 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:04:58 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:04:58 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1063.102501][T24841] IPVS: ftp: loaded support on port[0] = 21 [ 1063.276785][T24855] IPVS: ftp: loaded support on port[0] = 21 00:04:58 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x0, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1063.538096][T24860] IPVS: ftp: loaded support on port[0] = 21 [ 1063.705216][T24857] IPVS: ftp: loaded support on port[0] = 21 00:04:59 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1064.087485][T24870] IPVS: ftp: loaded support on port[0] = 21 00:04:59 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1064.215050][T24875] FAULT_INJECTION: forcing a failure. [ 1064.215050][T24875] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.227970][T24875] CPU: 1 PID: 24875 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1064.235899][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.245987][T24875] Call Trace: [ 1064.249332][T24875] dump_stack+0x191/0x1f0 [ 1064.253728][T24875] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1064.259702][T24875] should_fail+0xa3f/0xa50 [ 1064.264196][T24875] __should_failslab+0x264/0x280 [ 1064.269190][T24875] should_failslab+0x29/0x70 [ 1064.273838][T24875] kmem_cache_alloc_node+0x103/0xe70 [ 1064.279182][T24875] ? __alloc_skb+0x215/0xa10 [ 1064.283870][T24875] __alloc_skb+0x215/0xa10 [ 1064.288355][T24875] netlink_sendmsg+0x783/0x1330 [ 1064.293289][T24875] ? netlink_getsockopt+0x1430/0x1430 [ 1064.298705][T24875] ___sys_sendmsg+0x14ff/0x1590 [ 1064.303958][T24875] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1064.310212][T24875] ? __fget_light+0x6b1/0x710 [ 1064.314947][T24875] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1064.320642][T24875] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1064.326590][T24875] __se_sys_sendmsg+0x305/0x460 [ 1064.331512][T24875] __x64_sys_sendmsg+0x4a/0x70 [ 1064.336325][T24875] do_syscall_64+0xb6/0x160 [ 1064.340886][T24875] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1064.346824][T24875] RIP: 0033:0x459f39 [ 1064.350774][T24875] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1064.370424][T24875] RSP: 002b:00007f1d5d70ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.378898][T24875] RAX: ffffffffffffffda RBX: 00007f1d5d70ac90 RCX: 0000000000459f39 [ 1064.386912][T24875] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1064.394926][T24875] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1064.402937][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d5d70b6d4 [ 1064.410943][T24875] R13: 00000000004c8320 R14: 00000000004de420 R15: 0000000000000004 00:04:59 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:04:59 executing program 4 (fault-call:2 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:04:59 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x0, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1064.962791][T24881] IPVS: ftp: loaded support on port[0] = 21 [ 1064.991518][T24879] IPVS: ftp: loaded support on port[0] = 21 [ 1065.038669][T24884] FAULT_INJECTION: forcing a failure. [ 1065.038669][T24884] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.052046][T24884] CPU: 0 PID: 24884 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1065.059987][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.070073][T24884] Call Trace: [ 1065.073420][T24884] dump_stack+0x191/0x1f0 [ 1065.078343][T24884] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1065.084308][T24884] should_fail+0xa3f/0xa50 [ 1065.088804][T24884] __should_failslab+0x264/0x280 [ 1065.093800][T24884] should_failslab+0x29/0x70 [ 1065.098437][T24884] __kmalloc_node_track_caller+0x1c9/0x13d0 [ 1065.104381][T24884] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1065.110485][T24884] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 1065.115982][T24884] ? netlink_sendmsg+0x783/0x1330 [ 1065.121067][T24884] ? netlink_sendmsg+0x783/0x1330 [ 1065.126142][T24884] __alloc_skb+0x306/0xa10 [ 1065.130680][T24884] ? netlink_sendmsg+0x783/0x1330 [ 1065.135762][T24884] netlink_sendmsg+0x783/0x1330 [ 1065.140682][T24884] ? netlink_getsockopt+0x1430/0x1430 [ 1065.146092][T24884] ___sys_sendmsg+0x14ff/0x1590 [ 1065.150988][T24884] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1065.157144][T24884] ? __fget_light+0x6b1/0x710 [ 1065.161867][T24884] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1065.167560][T24884] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1065.173501][T24884] __se_sys_sendmsg+0x305/0x460 [ 1065.178419][T24884] __x64_sys_sendmsg+0x4a/0x70 [ 1065.183224][T24884] do_syscall_64+0xb6/0x160 [ 1065.187810][T24884] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1065.193730][T24884] RIP: 0033:0x459f39 [ 1065.197669][T24884] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1065.217398][T24884] RSP: 002b:00007f1d5d70ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.225857][T24884] RAX: ffffffffffffffda RBX: 00007f1d5d70ac90 RCX: 0000000000459f39 [ 1065.233857][T24884] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1065.241858][T24884] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1065.249862][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d5d70b6d4 [ 1065.257879][T24884] R13: 00000000004c8320 R14: 00000000004de420 R15: 0000000000000004 00:05:00 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1065.486938][T24887] IPVS: ftp: loaded support on port[0] = 21 [ 1067.932535][ T17] kworker/dying (17) used greatest stack depth: 50896 bytes left 00:05:05 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x0, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:05:05 executing program 4 (fault-call:2 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:05 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x0, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:05 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:05 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1070.232988][T24907] FAULT_INJECTION: forcing a failure. [ 1070.232988][T24907] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.245876][T24907] CPU: 1 PID: 24907 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1070.251052][T24914] FAULT_INJECTION: forcing a failure. [ 1070.251052][T24914] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.253812][T24907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.253831][T24907] Call Trace: [ 1070.253884][T24907] dump_stack+0x191/0x1f0 [ 1070.253939][T24907] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1070.253994][T24907] should_fail+0xa3f/0xa50 [ 1070.254062][T24907] __should_failslab+0x264/0x280 [ 1070.254115][T24907] should_failslab+0x29/0x70 [ 1070.254172][T24907] kmem_cache_alloc_trace+0xf7/0xd20 [ 1070.310305][T24907] ? alloc_pipe_info+0xdc/0x8a0 [ 1070.315236][T24907] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1070.321174][T24907] alloc_pipe_info+0xdc/0x8a0 [ 1070.325906][T24907] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1070.331856][T24907] splice_direct_to_actor+0xdbd/0x1130 [ 1070.337379][T24907] ? do_splice_direct+0x580/0x580 [ 1070.342464][T24907] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1070.348576][T24907] ? security_file_permission+0x268/0x6e0 [ 1070.354353][T24907] ? rw_verify_area+0x3a5/0x5e0 [ 1070.359323][T24907] do_splice_direct+0x342/0x580 [ 1070.364297][T24907] do_sendfile+0x1010/0x1d20 [ 1070.368982][T24907] __se_sys_sendfile64+0x2bb/0x360 [ 1070.374143][T24907] ? syscall_return_slowpath+0x90/0x610 [ 1070.379743][T24907] __x64_sys_sendfile64+0x56/0x70 [ 1070.384825][T24907] do_syscall_64+0xb6/0x160 [ 1070.389385][T24907] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1070.395310][T24907] RIP: 0033:0x459f39 [ 1070.399259][T24907] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1070.418896][T24907] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1070.427351][T24907] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1070.435353][T24907] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1070.443358][T24907] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1070.451358][T24907] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1070.459355][T24907] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1070.467394][T24914] CPU: 0 PID: 24914 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1070.475328][T24914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.485414][T24914] Call Trace: [ 1070.488775][T24914] dump_stack+0x191/0x1f0 [ 1070.493176][T24914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1070.499140][T24914] should_fail+0xa3f/0xa50 [ 1070.500779][T24908] IPVS: ftp: loaded support on port[0] = 21 [ 1070.503631][T24914] __should_failslab+0x264/0x280 [ 1070.503685][T24914] should_failslab+0x29/0x70 [ 1070.503725][T24914] kmem_cache_alloc+0xd6/0xd10 [ 1070.503774][T24914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1070.503836][T24914] ? skb_clone+0x326/0x5d0 [ 1070.534531][T24914] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1070.540755][T24914] skb_clone+0x326/0x5d0 [ 1070.545038][T24914] netlink_deliver_tap+0x804/0xeb0 [ 1070.550209][T24914] netlink_unicast+0xde9/0x1020 [ 1070.555105][T24914] netlink_sendmsg+0x110f/0x1330 [ 1070.560091][T24914] ? netlink_getsockopt+0x1430/0x1430 [ 1070.565487][T24914] ___sys_sendmsg+0x14ff/0x1590 [ 1070.570374][T24914] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1070.576502][T24914] ? __fget_light+0x6b1/0x710 [ 1070.581219][T24914] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1070.586889][T24914] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1070.593074][T24914] __se_sys_sendmsg+0x305/0x460 [ 1070.597966][T24914] __x64_sys_sendmsg+0x4a/0x70 [ 1070.602769][T24914] do_syscall_64+0xb6/0x160 [ 1070.607297][T24914] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1070.613202][T24914] RIP: 0033:0x459f39 [ 1070.617122][T24914] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1070.636744][T24914] RSP: 002b:00007f1d5d70ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.645179][T24914] RAX: ffffffffffffffda RBX: 00007f1d5d70ac90 RCX: 0000000000459f39 [ 1070.653178][T24914] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1070.661191][T24914] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1070.669185][T24914] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d5d70b6d4 [ 1070.677178][T24914] R13: 00000000004c8320 R14: 00000000004de420 R15: 0000000000000004 00:05:05 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:05 executing program 4 (fault-call:2 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1070.828312][T24913] IPVS: ftp: loaded support on port[0] = 21 [ 1070.898651][T24920] IPVS: ftp: loaded support on port[0] = 21 [ 1071.008074][T24924] FAULT_INJECTION: forcing a failure. [ 1071.008074][T24924] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.020888][T24924] CPU: 0 PID: 24924 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1071.028819][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.038996][T24924] Call Trace: [ 1071.042345][T24924] dump_stack+0x191/0x1f0 [ 1071.046742][T24924] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1071.052703][T24924] should_fail+0xa3f/0xa50 [ 1071.057194][T24924] __should_failslab+0x264/0x280 [ 1071.062193][T24924] should_failslab+0x29/0x70 [ 1071.066830][T24924] kmem_cache_alloc_node+0x103/0xe70 [ 1071.072174][T24924] ? __alloc_skb+0x215/0xa10 [ 1071.076821][T24924] ? rtnetlink_rcv_msg+0x443/0x1580 [ 1071.082101][T24924] __alloc_skb+0x215/0xa10 [ 1071.086563][T24924] ? local_bh_enable+0x36/0x40 [ 1071.091393][T24924] netlink_ack+0x579/0x1190 [ 1071.095956][T24924] ? kmsan_get_metadata+0x39/0x350 [ 1071.101144][T24924] netlink_rcv_skb+0x316/0x620 [ 1071.105964][T24924] ? rtnetlink_bind+0x120/0x120 [ 1071.110884][T24924] rtnetlink_rcv+0x50/0x60 [ 1071.115365][T24924] netlink_unicast+0xf3e/0x1020 [ 1071.120288][T24924] netlink_sendmsg+0x110f/0x1330 [ 1071.125320][T24924] ? netlink_getsockopt+0x1430/0x1430 [ 1071.130739][T24924] ___sys_sendmsg+0x14ff/0x1590 [ 1071.135644][T24924] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1071.141810][T24924] ? __fget_light+0x6b1/0x710 [ 1071.146540][T24924] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1071.152246][T24924] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1071.158195][T24924] __se_sys_sendmsg+0x305/0x460 [ 1071.163125][T24924] __x64_sys_sendmsg+0x4a/0x70 [ 1071.167944][T24924] do_syscall_64+0xb6/0x160 [ 1071.172508][T24924] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1071.178438][T24924] RIP: 0033:0x459f39 [ 1071.182395][T24924] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1071.202042][T24924] RSP: 002b:00007f1d5d70ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.210512][T24924] RAX: ffffffffffffffda RBX: 00007f1d5d70ac90 RCX: 0000000000459f39 [ 1071.218557][T24924] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1071.226569][T24924] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.234580][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d5d70b6d4 [ 1071.242594][T24924] R13: 00000000004c8320 R14: 00000000004de420 R15: 0000000000000004 [ 1071.273922][T24925] FAULT_INJECTION: forcing a failure. [ 1071.273922][T24925] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.286729][T24925] CPU: 0 PID: 24925 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1071.294660][T24925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.304744][T24925] Call Trace: [ 1071.308092][T24925] dump_stack+0x191/0x1f0 [ 1071.312480][T24925] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1071.318428][T24925] should_fail+0xa3f/0xa50 [ 1071.322916][T24925] __should_failslab+0x264/0x280 [ 1071.327907][T24925] should_failslab+0x29/0x70 [ 1071.332536][T24925] __kmalloc+0xae/0x430 [ 1071.336739][T24925] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1071.342406][T24925] ? kcalloc+0x93/0x110 [ 1071.346605][T24925] kcalloc+0x93/0x110 [ 1071.350629][T24925] alloc_pipe_info+0x56c/0x8a0 [ 1071.355458][T24925] splice_direct_to_actor+0xdbd/0x1130 [ 1071.360960][T24925] ? do_splice_direct+0x580/0x580 [ 1071.366036][T24925] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1071.372156][T24925] ? security_file_permission+0x268/0x6e0 [ 1071.377956][T24925] ? rw_verify_area+0x3a5/0x5e0 [ 1071.382872][T24925] do_splice_direct+0x342/0x580 [ 1071.387793][T24925] do_sendfile+0x1010/0x1d20 [ 1071.392466][T24925] __se_sys_sendfile64+0x2bb/0x360 [ 1071.397623][T24925] ? syscall_return_slowpath+0x90/0x610 [ 1071.403222][T24925] __x64_sys_sendfile64+0x56/0x70 [ 1071.408289][T24925] do_syscall_64+0xb6/0x160 [ 1071.412838][T24925] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1071.418886][T24925] RIP: 0033:0x459f39 [ 1071.422833][T24925] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1071.442476][T24925] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1071.450934][T24925] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1071.458938][T24925] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1071.466949][T24925] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.474960][T24925] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1071.482966][T24925] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:05:06 executing program 5 (fault-call:15 fault-nth:0): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:06 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:06 executing program 4 (fault-call:2 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1071.718984][T24932] FAULT_INJECTION: forcing a failure. [ 1071.718984][T24932] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.729981][T24930] FAULT_INJECTION: forcing a failure. [ 1071.729981][T24930] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.732376][T24932] CPU: 0 PID: 24932 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1071.752625][T24932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.762809][T24932] Call Trace: [ 1071.766158][T24932] dump_stack+0x191/0x1f0 [ 1071.770547][T24932] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1071.776766][T24932] should_fail+0xa3f/0xa50 [ 1071.781277][T24932] __should_failslab+0x264/0x280 [ 1071.786270][T24932] should_failslab+0x29/0x70 [ 1071.790907][T24932] __kmalloc_node+0x1b0/0x1380 [ 1071.795731][T24932] ? kvmalloc_node+0x19f/0x3d0 [ 1071.800899][T24932] ? sanity+0x2c3/0x840 [ 1071.805101][T24932] kvmalloc_node+0x19f/0x3d0 [ 1071.809750][T24932] iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1071.815551][T24932] default_file_splice_read+0x294/0x1060 [ 1071.821287][T24932] ? security_file_permission+0x51f/0x6e0 [ 1071.827237][T24932] ? rw_verify_area+0x3a5/0x5e0 [ 1071.832162][T24932] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1071.838107][T24932] ? __ia32_sys_tee+0x160/0x160 [ 1071.843009][T24932] splice_direct_to_actor+0x587/0x1130 [ 1071.848510][T24932] ? do_splice_direct+0x580/0x580 [ 1071.853638][T24932] do_splice_direct+0x342/0x580 [ 1071.858559][T24932] do_sendfile+0x1010/0x1d20 [ 1071.863236][T24932] __se_sys_sendfile64+0x2bb/0x360 [ 1071.868396][T24932] ? syscall_return_slowpath+0x90/0x610 [ 1071.873999][T24932] __x64_sys_sendfile64+0x56/0x70 [ 1071.879074][T24932] do_syscall_64+0xb6/0x160 [ 1071.883629][T24932] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1071.889555][T24932] RIP: 0033:0x459f39 [ 1071.893504][T24932] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1071.913151][T24932] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1071.921631][T24932] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1071.929669][T24932] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1071.937692][T24932] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1071.945721][T24932] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1071.953751][T24932] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1071.961811][T24930] CPU: 1 PID: 24930 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1071.969780][T24930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.979881][T24930] Call Trace: [ 1071.983214][T24930] dump_stack+0x191/0x1f0 [ 1071.987586][T24930] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1071.993518][T24930] should_fail+0xa3f/0xa50 [ 1071.997978][T24930] __should_failslab+0x264/0x280 [ 1072.002951][T24930] should_failslab+0x29/0x70 [ 1072.007564][T24930] kmem_cache_alloc+0xd6/0xd10 [ 1072.012353][T24930] ? apic_timer_interrupt+0xa/0x40 [ 1072.017489][T24930] ? create_new_namespaces+0xc1/0xda0 [ 1072.022903][T24930] create_new_namespaces+0xc1/0xda0 [ 1072.028321][T24930] unshare_nsproxy_namespaces+0x25e/0x340 [ 1072.034073][T24930] ksys_unshare+0x883/0x1110 [ 1072.038700][T24930] __se_sys_unshare+0x41/0x60 [ 1072.043396][T24930] __x64_sys_unshare+0x32/0x50 [ 1072.048195][T24930] do_syscall_64+0xb6/0x160 [ 1072.052725][T24930] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1072.058632][T24930] RIP: 0033:0x459f39 [ 1072.062553][T24930] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1072.082176][T24930] RSP: 002b:00007f6cb02b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1072.090611][T24930] RAX: ffffffffffffffda RBX: 00007f6cb02b6c90 RCX: 0000000000459f39 [ 1072.098698][T24930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1072.106684][T24930] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 00:05:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff7, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0xab, {0xab, 0x0, "14074b9f062e0ecf3f49571176778fdfb2383d5cabdbf784fb31826cb8793b3b92d132650268df0d21829b4ade25ba2d7785b486f323b21bc20f46c43d2ab3897a9b7f1e76f7f2b4fb1b0153634000000005050c967bbc690a8e632d7a1be36f755c875a5e306f6ab28667998b26e8c22ba8003d77694d8074ea4f94bb89af5fb2482f49164617cbedbcf8d2faa88d8cfe1db888379dfb411a36b02589f9794596bf39a65111518cc0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x81, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x80}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x6}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1f, {}, {{0x9, 0x5, 0x1, 0x9, 0x1b, 0xfd, 0xff, 0x51, {0x7, 0x25, 0x1, 0x80, 0x8, 0x3}}}}, {0x9, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, 0x2}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0xe1, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x2, 0xfb, 'U'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x81, 0x1, 0x7, 0x8, "3cb2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x2cf, 0x9, 0x81, 0x3, {0x7, 0x25, 0x1, 0x0, 0x39, 0x26}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x610, 0xff, 0x9, 0x5, 0x10, 0x1f}, 0x10ff, &(0x7f0000000280)={0x5, 0xf, 0x10ff, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x9, 0x8, 0x8, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x1, 0x0, 0x74, [0x3263ae225b59527d]}, @generic={0x1003, 0x10, 0x0, "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"}, @generic={0xd2, 0x10, 0x2, "c471af64ab44a1f3dfb591e542d7258e163452c64a77c65cc80083e3fb21a9a611804814716d959547055f77b15a4e1e2d74e9f5b17206be0e7d31e6ea57738e5ecae816df16c3a51ddb0dbf722ffa04455c664119e03f0b1da5057683c2f576b921a7db2c2ae5277eb7e26d1c6cf5243621a14bc908cb61e8ae8fe07822d13a9e70d9201c1f082ed713586c250d6f4e1190261ea2aa93ad417e2a962bdf0ab7bbfa8b1178e1271443b5196e6535cd0f68cd149718321b72830fe68b1f1930797ba8d2e5416b628b912d46d3c34edb"}, @ss_cap={0xa, 0x10, 0x3, 0x3, 0x1, 0xe5, 0x7, 0xe4b}]}, 0x5, [{0x45, &(0x7f0000001380)=@string={0x45, 0x3, "883ee69424cde92807540b50027de57d37d5b20e1e20958538d20543df5a34e37191915ecbfd4365cff360fff92589b002790eb70fdbf97458f806e8369eb7362751d4"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2460}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x1894}}, {0xc3, &(0x7f0000001440)=@string={0xc3, 0x3, "2388fa692ebf805cb572333143dd458e00777f79bcd8fe33e9f07b8d3c49441fcb0d9c0e40470e231c358cdf67812bb7370a64de2dc31065b1104b021ee2741e1096077cb32d01d8004dbf1e2165de3c40c3cbba67fd1ffb564970425e1e359124c955737d8d9f78bc892ebd24fb04031355941758e0e39c47870a94a3f121a7da2263bca2a11756334b808ee22af6e1fdde25c0a32cac9e9de2ef075b9b0914a5e1456f722e8ab2ea3747dff9a37e5faf9a253bff3f5a8658e29f5a19811d947b"}}, {0x28, &(0x7f0000001540)=@string={0x28, 0x3, "980e6b26f61bbdaec53cffe4344c31f9de954b525cbce5a64cfe92e27050ce6447a505d18645"}}]}) [ 1072.114671][T24930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02b76d4 [ 1072.122760][T24930] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000006 [ 1072.139097][T24934] FAULT_INJECTION: forcing a failure. [ 1072.139097][T24934] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.152026][T24934] CPU: 0 PID: 24934 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1072.160089][T24934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.170193][T24934] Call Trace: [ 1072.173572][T24934] dump_stack+0x191/0x1f0 [ 1072.178006][T24934] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1072.183992][T24934] should_fail+0xa3f/0xa50 [ 1072.188512][T24934] __should_failslab+0x264/0x280 [ 1072.193521][T24934] should_failslab+0x29/0x70 [ 1072.198150][T24934] __kmalloc_node_track_caller+0x1c9/0x13d0 [ 1072.204085][T24934] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1072.210182][T24934] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 1072.215677][T24934] ? netlink_ack+0x579/0x1190 [ 1072.220402][T24934] ? netlink_ack+0x579/0x1190 [ 1072.225139][T24934] __alloc_skb+0x306/0xa10 [ 1072.229579][T24934] ? netlink_ack+0x579/0x1190 [ 1072.234321][T24934] netlink_ack+0x579/0x1190 [ 1072.238867][T24934] ? kmsan_get_metadata+0x39/0x350 [ 1072.244025][T24934] netlink_rcv_skb+0x316/0x620 [ 1072.248824][T24934] ? rtnetlink_bind+0x120/0x120 [ 1072.253732][T24934] rtnetlink_rcv+0x50/0x60 [ 1072.258187][T24934] netlink_unicast+0xf3e/0x1020 [ 1072.263085][T24934] netlink_sendmsg+0x110f/0x1330 [ 1072.268070][T24934] ? netlink_getsockopt+0x1430/0x1430 [ 1072.273471][T24934] ___sys_sendmsg+0x14ff/0x1590 [ 1072.278355][T24934] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1072.284498][T24934] ? __fget_light+0x6b1/0x710 [ 1072.289206][T24934] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1072.294886][T24934] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1072.300824][T24934] __se_sys_sendmsg+0x305/0x460 [ 1072.305739][T24934] __x64_sys_sendmsg+0x4a/0x70 [ 1072.310552][T24934] do_syscall_64+0xb6/0x160 [ 1072.315096][T24934] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1072.321010][T24934] RIP: 0033:0x459f39 [ 1072.324941][T24934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1072.344599][T24934] RSP: 002b:00007f1d5d70ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.353049][T24934] RAX: ffffffffffffffda RBX: 00007f1d5d70ac90 RCX: 0000000000459f39 [ 1072.361060][T24934] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 00:05:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', 0x0, 0x0, 0x292080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$setflags(r1, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r3) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfc, 0x3, 0x7f}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}], 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1072.369074][T24934] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1072.377069][T24934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d5d70b6d4 [ 1072.385064][T24934] R13: 00000000004c8320 R14: 00000000004de420 R15: 0000000000000004 [ 1072.791933][T19708] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1073.031919][T19708] usb 4-1: Using ep0 maxpacket: 16 [ 1073.152423][T19708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.163773][T19708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1073.176763][T19708] usb 4-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 1073.185925][T19708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.195459][T19708] usb 4-1: config 0 descriptor?? [ 1073.673196][T19708] hid (null): invalid report_size 951246735 [ 1073.679171][T19708] hid (null): nested delimiters [ 1073.684277][T19708] hid (null): report_id 9203 is invalid [ 1073.692735][T19708] hid-generic 0003:1FF7:0013.0011: invalid report_size 951246735 [ 1073.700633][T19708] hid-generic 0003:1FF7:0013.0011: item 0 4 1 7 parsing failed [ 1073.708795][T19708] hid-generic: probe of 0003:1FF7:0013.0011 failed with error -22 [ 1073.875372][T19708] usb 4-1: USB disconnect, device number 22 [ 1074.661993][T24899] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1074.901870][T24899] usb 4-1: Using ep0 maxpacket: 16 [ 1075.022354][T24899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.033501][T24899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1075.046473][T24899] usb 4-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 1075.055645][T24899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.065358][T24899] usb 4-1: config 0 descriptor?? [ 1075.352794][T24899] hid (null): invalid report_size 951246735 [ 1075.358741][T24899] hid (null): nested delimiters [ 1075.363879][T24899] hid (null): report_id 9203 is invalid [ 1075.372314][T24899] hid-generic 0003:1FF7:0013.0012: invalid report_size 951246735 [ 1075.380215][T24899] hid-generic 0003:1FF7:0013.0012: item 0 4 1 7 parsing failed [ 1075.388371][T24899] hid-generic: probe of 0003:1FF7:0013.0012 failed with error -22 [ 1075.515569][T19704] usb 4-1: USB disconnect, device number 23 00:05:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x18, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x6087ffffffff}, 0x0) 00:05:12 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:12 executing program 4 (fault-call:2 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:12 executing program 5 (fault-call:15 fault-nth:1): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x5) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x101, 0x4, 0x1, 0x4, 0x400, 0x1, 0xa67e2f53e4db5366, 0x8}}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x9) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fdinfo/4\x00') ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000080)={0x0, 0x7f}) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffe7b, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025641700d1bd", 0xc0}], 0x1}, 0x0) 00:05:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "b060"}, @global=@item_012={0x2, 0x1, 0x1, "08c9"}]}}, 0x0}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000080)={0xfffffff7, 0x3ff, 0x1}) [ 1077.624608][T24955] FAULT_INJECTION: forcing a failure. [ 1077.624608][T24955] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.637752][T24955] CPU: 0 PID: 24955 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 1077.643946][T24957] FAULT_INJECTION: forcing a failure. [ 1077.643946][T24957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1077.645693][T24955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.645710][T24955] Call Trace: [ 1077.645764][T24955] dump_stack+0x191/0x1f0 [ 1077.645837][T24955] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1077.682647][T24955] should_fail+0xa3f/0xa50 [ 1077.687136][T24955] __should_failslab+0x264/0x280 [ 1077.692130][T24955] should_failslab+0x29/0x70 [ 1077.696762][T24955] kmem_cache_alloc+0xd6/0xd10 [ 1077.701572][T24955] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1077.707507][T24955] ? skb_clone+0x326/0x5d0 [ 1077.711977][T24955] skb_clone+0x326/0x5d0 [ 1077.716274][T24955] netlink_deliver_tap+0x804/0xeb0 [ 1077.721470][T24955] netlink_unicast+0x9bd/0x1020 [ 1077.726380][T24955] netlink_ack+0x10d5/0x1190 [ 1077.731060][T24955] netlink_rcv_skb+0x316/0x620 [ 1077.735867][T24955] ? rtnetlink_bind+0x120/0x120 [ 1077.740776][T24955] rtnetlink_rcv+0x50/0x60 [ 1077.745267][T24955] netlink_unicast+0xf3e/0x1020 [ 1077.750183][T24955] netlink_sendmsg+0x110f/0x1330 [ 1077.755191][T24955] ? netlink_getsockopt+0x1430/0x1430 [ 1077.760624][T24955] ___sys_sendmsg+0x14ff/0x1590 [ 1077.765527][T24955] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1077.771679][T24955] ? __fget_light+0x6b1/0x710 [ 1077.776420][T24955] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1077.782134][T24955] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1077.788075][T24955] __se_sys_sendmsg+0x305/0x460 [ 1077.793023][T24955] __x64_sys_sendmsg+0x4a/0x70 [ 1077.797839][T24955] do_syscall_64+0xb6/0x160 [ 1077.802393][T24955] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1077.808311][T24955] RIP: 0033:0x459f39 [ 1077.812265][T24955] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1077.831924][T24955] RSP: 002b:00007f1d5d70ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.840389][T24955] RAX: ffffffffffffffda RBX: 00007f1d5d70ac90 RCX: 0000000000459f39 [ 1077.848395][T24955] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1077.856402][T24955] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1077.864403][T24955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d5d70b6d4 [ 1077.872403][T24955] R13: 00000000004c8320 R14: 00000000004de420 R15: 0000000000000004 [ 1077.880446][T24957] CPU: 1 PID: 24957 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1077.888375][T24957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.898466][T24957] Call Trace: [ 1077.901813][T24957] dump_stack+0x191/0x1f0 [ 1077.906220][T24957] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1077.912185][T24957] should_fail+0xa3f/0xa50 [ 1077.916691][T24957] should_fail_alloc_page+0x1fb/0x270 [ 1077.922133][T24957] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1077.926248][T24962] FAULT_INJECTION: forcing a failure. [ 1077.926248][T24962] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.927654][T24957] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1077.927697][T24957] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1077.927758][T24957] ? kmsan_slab_alloc+0xaa/0x120 [ 1077.957253][T24957] ? __kmalloc_node+0xd7a/0x1380 [ 1077.962241][T24957] ? kvmalloc_node+0x19f/0x3d0 [ 1077.967060][T24957] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1077.973028][T24957] ? default_file_splice_read+0x294/0x1060 [ 1077.978899][T24957] ? splice_direct_to_actor+0x587/0x1130 [ 1077.984599][T24957] ? do_splice_direct+0x342/0x580 [ 1077.989671][T24957] ? do_sendfile+0x1010/0x1d20 [ 1077.994479][T24957] ? __se_sys_sendfile64+0x2bb/0x360 [ 1077.999806][T24957] ? __x64_sys_sendfile64+0x56/0x70 [ 1078.005047][T24957] ? do_syscall_64+0xb6/0x160 [ 1078.009768][T24957] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1078.015887][T24957] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1078.021575][T24957] ? __msan_poison_alloca+0x158/0x1a0 [ 1078.027449][T24957] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1078.033656][T24957] ? should_fail+0x177/0xa50 [ 1078.038295][T24957] ? stack_trace_save+0x11c/0x1b0 [ 1078.043368][T24957] ? stack_trace_save+0x11c/0x1b0 [ 1078.048435][T24957] ? apic_timer_interrupt+0xa/0x40 [ 1078.053622][T24957] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.059574][T24957] alloc_pages_current+0x68d/0x9a0 [ 1078.064764][T24957] push_pipe+0x660/0xbd0 [ 1078.069068][T24957] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1078.074773][T24957] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1078.080581][T24957] default_file_splice_read+0x294/0x1060 [ 1078.086292][T24957] ? security_file_permission+0x51f/0x6e0 [ 1078.092153][T24957] ? rw_verify_area+0x3a5/0x5e0 [ 1078.097063][T24957] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.103005][T24957] ? __ia32_sys_tee+0x160/0x160 [ 1078.107999][T24957] splice_direct_to_actor+0x587/0x1130 [ 1078.113624][T24957] ? do_splice_direct+0x580/0x580 [ 1078.118732][T24957] do_splice_direct+0x342/0x580 [ 1078.123658][T24957] do_sendfile+0x1010/0x1d20 [ 1078.128337][T24957] __se_sys_sendfile64+0x2bb/0x360 [ 1078.133497][T24957] ? syscall_return_slowpath+0x90/0x610 [ 1078.139099][T24957] __x64_sys_sendfile64+0x56/0x70 [ 1078.144167][T24957] do_syscall_64+0xb6/0x160 [ 1078.148720][T24957] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1078.154648][T24957] RIP: 0033:0x459f39 [ 1078.158595][T24957] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1078.178236][T24957] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1078.186697][T24957] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1078.194790][T24957] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1078.202792][T24957] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1078.210796][T24957] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1078.218800][T24957] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1078.226857][T24962] CPU: 0 PID: 24962 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1078.234805][T24962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.234821][T24962] Call Trace: [ 1078.234874][T24962] dump_stack+0x191/0x1f0 [ 1078.234926][T24962] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.234995][T24962] should_fail+0xa3f/0xa50 [ 1078.248368][T24962] __should_failslab+0x264/0x280 [ 1078.263018][T24962] should_failslab+0x29/0x70 [ 1078.272523][T24962] __kmalloc+0xae/0x430 [ 1078.276732][T24962] ? kzalloc+0x53/0xb0 [ 1078.280834][T24962] kzalloc+0x53/0xb0 [ 1078.284759][T24962] copy_net_ns+0x18a/0x970 [ 1078.289206][T24962] ? kmsan_get_shadow_origin_ptr+0x184/0x4b0 [ 1078.295301][T24962] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.301224][T24962] create_new_namespaces+0x8d8/0xda0 [ 1078.306568][T24962] unshare_nsproxy_namespaces+0x25e/0x340 [ 1078.312317][T24962] ksys_unshare+0x883/0x1110 [ 1078.316945][T24962] __se_sys_unshare+0x41/0x60 [ 1078.321657][T24962] __x64_sys_unshare+0x32/0x50 [ 1078.326473][T24962] do_syscall_64+0xb6/0x160 [ 1078.331001][T24962] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1078.336922][T24962] RIP: 0033:0x459f39 [ 1078.340842][T24962] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1078.360462][T24962] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1078.368897][T24962] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1078.376899][T24962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1078.384882][T24962] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1078.392879][T24962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1078.400862][T24962] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:05:13 executing program 4 (fault-call:2 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:13 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:13 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0x3a, 0xad, 0x10, 0x1004, 0x61aa, 0x40fb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x20, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = gettid() ptrace(0x4206, r0) tkill(r0, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x9, 0x0, [], {0x0, @reserved}}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/7, 0x7}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000a00)=""/159, 0x9f}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/207, 0xcf}, {&(0x7f00000009c0)=""/16, 0x10}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/230, 0xe6}], 0x7, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000180)={0x0, 0x28, &(0x7f0000000140)="48a850f62672af2975d62c3afa89c0a434f7d8ed47da4beb632bd45dc52f034fe2fdca978da9bdac"}) socket$unix(0x1, 0x2, 0x0) 00:05:13 executing program 5 (fault-call:15 fault-nth:2): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1078.570109][T24972] FAULT_INJECTION: forcing a failure. [ 1078.570109][T24972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1078.583381][T24972] CPU: 1 PID: 24972 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1078.591271][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.601321][T24972] Call Trace: [ 1078.604609][T24972] dump_stack+0x191/0x1f0 [ 1078.608938][T24972] should_fail+0xa3f/0xa50 [ 1078.613357][T24972] should_fail_alloc_page+0x1fb/0x270 [ 1078.618724][T24972] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1078.624186][T24972] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.630080][T24972] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1078.636064][T24972] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1078.642221][T24972] ? prep_new_page+0x792/0x9b0 [ 1078.646990][T24972] ? get_page_from_freelist+0x11d3/0x19f0 [ 1078.652720][T24972] kmsan_alloc_page+0xc3/0x360 [ 1078.657478][T24972] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.663364][T24972] __alloc_pages_nodemask+0x149d/0x60c0 [ 1078.668900][T24972] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1078.674873][T24972] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1078.680841][T24972] ? kmsan_slab_alloc+0xaa/0x120 [ 1078.685790][T24972] ? __kmalloc_node+0xd7a/0x1380 [ 1078.690714][T24972] ? kvmalloc_node+0x19f/0x3d0 [ 1078.695469][T24972] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1078.701362][T24972] ? default_file_splice_read+0x294/0x1060 [ 1078.707170][T24972] ? splice_direct_to_actor+0x587/0x1130 [ 1078.712791][T24972] ? do_splice_direct+0x342/0x580 [ 1078.717805][T24972] ? do_sendfile+0x1010/0x1d20 [ 1078.722558][T24972] ? __se_sys_sendfile64+0x2bb/0x360 [ 1078.727828][T24972] ? __x64_sys_sendfile64+0x56/0x70 [ 1078.733012][T24972] ? do_syscall_64+0xb6/0x160 [ 1078.737696][T24972] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1078.743759][T24972] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1078.749394][T24972] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1078.755540][T24972] ? stack_trace_save+0x11c/0x1b0 [ 1078.760567][T24972] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.766454][T24972] alloc_pages_current+0x68d/0x9a0 [ 1078.771583][T24972] push_pipe+0x660/0xbd0 [ 1078.775819][T24972] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1078.781468][T24972] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1078.787198][T24972] default_file_splice_read+0x294/0x1060 [ 1078.792838][T24972] ? security_file_permission+0x51f/0x6e0 [ 1078.798571][T24972] ? rw_verify_area+0x3a5/0x5e0 [ 1078.803418][T24972] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1078.809662][T24972] ? __ia32_sys_tee+0x160/0x160 [ 1078.814506][T24972] splice_direct_to_actor+0x587/0x1130 [ 1078.819969][T24972] ? do_splice_direct+0x580/0x580 [ 1078.825006][T24972] do_splice_direct+0x342/0x580 [ 1078.829866][T24972] do_sendfile+0x1010/0x1d20 [ 1078.834467][T24972] __se_sys_sendfile64+0x2bb/0x360 [ 1078.839567][T24972] ? syscall_return_slowpath+0x90/0x610 [ 1078.845106][T24972] __x64_sys_sendfile64+0x56/0x70 [ 1078.852049][T24972] do_syscall_64+0xb6/0x160 [ 1078.856546][T24972] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1078.862438][T24972] RIP: 0033:0x459f39 [ 1078.866419][T24972] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1078.886022][T24972] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1078.894421][T24972] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1078.902377][T24972] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1078.911116][T24972] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:05:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() ptrace(0x4206, r1) tkill(r1, 0x9) capset(&(0x7f0000000180)={0x20071026, r1}, &(0x7f0000001fe8)={0x800, 0x0, 0x8, 0x0, 0x80}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="001b0400002bf7"], 0x28}}, 0x0) [ 1078.919083][T24972] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1078.927043][T24972] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1078.998487][T24975] FAULT_INJECTION: forcing a failure. [ 1078.998487][T24975] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.011618][T24975] CPU: 0 PID: 24975 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1079.019561][T24975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.029653][T24975] Call Trace: [ 1079.033015][T24975] dump_stack+0x191/0x1f0 [ 1079.037437][T24975] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1079.043400][T24975] should_fail+0xa3f/0xa50 [ 1079.047905][T24975] __should_failslab+0x264/0x280 [ 1079.052917][T24975] should_failslab+0x29/0x70 [ 1079.057566][T24975] kmem_cache_alloc+0xd6/0xd10 [ 1079.062383][T24975] ? kasan_kmalloc+0xd/0x30 [ 1079.066919][T24975] ? copy_net_ns+0x252/0x970 [ 1079.071531][T24975] ? kzalloc+0x53/0xb0 [ 1079.075636][T24975] copy_net_ns+0x252/0x970 [ 1079.080086][T24975] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1079.086007][T24975] create_new_namespaces+0x8d8/0xda0 [ 1079.091340][T24975] unshare_nsproxy_namespaces+0x25e/0x340 [ 1079.097088][T24975] ksys_unshare+0x883/0x1110 [ 1079.103031][T24975] __se_sys_unshare+0x41/0x60 [ 1079.107730][T24975] __x64_sys_unshare+0x32/0x50 [ 1079.112525][T24975] do_syscall_64+0xb6/0x160 [ 1079.117070][T24975] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1079.122978][T24975] RIP: 0033:0x459f39 [ 1079.126897][T24975] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:05:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xf21}, &(0x7f0000000080)=0x8) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) [ 1079.146519][T24975] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1079.154958][T24975] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1079.162947][T24975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1079.170934][T24975] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1079.178925][T24975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1079.186997][T24975] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1079.272071][T24899] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1079.282399][T19704] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1079.532648][T19704] usb 3-1: Using ep0 maxpacket: 16 [ 1079.632133][T24899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.643332][T24899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1079.656272][T24899] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 1079.662141][T19704] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1079.665497][T24899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.673681][T19704] usb 3-1: config 0 has no interface number 0 [ 1079.686012][T24899] usb 4-1: config 0 descriptor?? [ 1079.687798][T19704] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=40.fb [ 1079.701831][T19704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.711042][T19704] usb 3-1: config 0 descriptor?? [ 1079.754479][T19704] usb 3-1: bad CDC descriptors [ 1079.970817][T24898] usb 3-1: USB disconnect, device number 22 [ 1080.043938][T24899] usbhid 4-1:0.0: can't add hid device: -71 [ 1080.050194][T24899] usbhid: probe of 4-1:0.0 failed with error -71 [ 1080.069885][T24899] usb 4-1: USB disconnect, device number 24 [ 1080.701910][T24899] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1081.061952][T24899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.073012][T24899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1081.085933][T24899] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 1081.095083][T24899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.104703][T24899] usb 4-1: config 0 descriptor?? [ 1081.412229][T24899] uclogic 0003:2179:0053.0013: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0 [ 1081.456869][T19704] usb 4-1: USB disconnect, device number 25 00:05:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x18, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x6087ffffffff}, 0x0) 00:05:19 executing program 1 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:19 executing program 5 (fault-call:15 fault-nth:3): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2808283189eeccfe3bbdfe000000050000797e000000004057595c01640000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) r3 = dup3(0xffffffffffffffff, r2, 0x40000) connect$caif(r3, &(0x7f0000000080)=@rfm={0x25, 0x4, "adf67cdbc3eb908668d92324f094fb1b"}, 0x18) 00:05:19 executing program 2: socket$unix(0x1, 0x5, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) sched_getparam(r1, &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x3, r3}, {0x2, 0x1}, {0x2, 0x1, r4}], {}, [{0x8, 0x7, r2}, {0x8, 0x1, r2}, {0x8, 0x5, r5}, {0x8, 0x2, r2}], {0x10, 0x8}, {0x20, 0x1}}, 0x5c, 0x5ba13f13387ab4e3) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) r8 = getgid() setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r6}], {}, [{0x8, 0x4, r7}, {0x8, 0x2, r8}], {0x10, 0x3}, {0x20, 0x2}}, 0x3c, 0x2) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='fuse\x00', 0x1000200, &(0x7f0000000680)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsname={'fsname', 0x3d, 'system.posix_acl_access\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x0, 0x31, 0x18, 0x62, 0x37, 0x61, 0x7], 0x2d, [0x37, 0x32, 0x30, 0x65], 0x2d, [0x64, 0x65, 0x32, 0x34], 0x2d, [0x30, 0x7, 0x64], 0x2d, [0x64, 0x64, 0x36, 0x31, 0x9ee9c89ec2e2f97e, 0x39, 0x0, 0x19]}}}, {@smackfsdef={'smackfsdef', 0x3d, '(vboxnet1vboxnet0$'}}, {@permit_directio='permit_directio'}, {@subj_type={'subj_type', 0x3d, 'system.posix_acl_access\x00'}}, {@smackfsfloor={'smackfsfloor'}}]}}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x84001, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000840)={0x1, 0x4}) statfs(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/35) r10 = syz_open_dev$adsp(&(0x7f0000000900)='/dev/adsp#\x00', 0x7, 0x3) getsockopt(r10, 0x2, 0x200, &(0x7f0000000940)=""/115, &(0x7f00000009c0)=0x73) r11 = socket(0x12, 0x800, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f0000000a00)=0x9, 0x4) ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000a40)=""/251) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/dsp\x00', 0x40042, 0x0) sendmsg$TIPC_NL_LINK_SET(r12, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x31c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x148, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xadd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x365}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fa7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @remote}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xd}, 0xf53}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2486}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40000}, 0x14) write$smack_current(r0, &(0x7f0000000f80)='GPL+systemvmnet1\'nodevwlan1keyring/proc\'em1\x00', 0x2c) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x267, 0x3, 0x80, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x97, 0x1, 0xf8, 0x8}}]}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x300, 0x40, 0x8f, 0x5, 0x40, 0x7}, 0x1d, &(0x7f0000001040)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x2, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x5, 0x4, 0x3, 0x1, 0x3}]}, 0x3, [{0x52, &(0x7f0000001080)=@string={0x52, 0x3, "26467d29a680ce2a775868b77f65b49f868dc02508918dfe0fb0b5648861a7f0993fd69d6483771f6214488e1ae1ad1d11ea2920b8636cef123c9b69ecbca333acadea742c7b7b553950dedbdd542ed6"}}, {0x5e, &(0x7f0000001100)=@string={0x5e, 0x3, "e9c96727e9e0f5d04595097c2c53b1a9b2743c27139735c1c413c5a3010ad6db6a7210660a689277675f1a2f940ee1cf400e3fee4fe723a345d029005036c01c40572d0cb5630936eac14b16475431e8edf02228a010717d91e29644"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x429}}]}) 00:05:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050700000000000000000000000085cad37ccefc32c6c0", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008002d0004000000"], 0x3}}, 0x10) [ 1084.731505][T24997] FAULT_INJECTION: forcing a failure. [ 1084.731505][T24997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1084.744760][T24997] CPU: 0 PID: 24997 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1084.752655][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.762720][T24997] Call Trace: [ 1084.766027][T24997] dump_stack+0x191/0x1f0 [ 1084.770376][T24997] should_fail+0xa3f/0xa50 [ 1084.774827][T24997] should_fail_alloc_page+0x1fb/0x270 [ 1084.780222][T24997] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1084.785705][T24997] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1084.789190][T25004] FAULT_INJECTION: forcing a failure. [ 1084.789190][T25004] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.791613][T24997] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1084.791639][T24997] ? prep_new_page+0x792/0x9b0 [ 1084.791693][T24997] ? get_page_from_freelist+0x11d3/0x19f0 [ 1084.820751][T24997] kmsan_alloc_page+0x131/0x360 [ 1084.825613][T24997] __alloc_pages_nodemask+0x149d/0x60c0 [ 1084.831183][T24997] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1084.837177][T24997] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1084.843156][T24997] ? kmsan_slab_alloc+0xaa/0x120 [ 1084.848098][T24997] ? __kmalloc_node+0xd7a/0x1380 [ 1084.853037][T24997] ? kvmalloc_node+0x19f/0x3d0 [ 1084.857801][T24997] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1084.863702][T24997] ? default_file_splice_read+0x294/0x1060 [ 1084.869505][T24997] ? splice_direct_to_actor+0x587/0x1130 [ 1084.875136][T24997] ? do_splice_direct+0x342/0x580 [ 1084.880154][T24997] ? do_sendfile+0x1010/0x1d20 [ 1084.884918][T24997] ? __se_sys_sendfile64+0x2bb/0x360 [ 1084.890201][T24997] ? __x64_sys_sendfile64+0x56/0x70 [ 1084.895403][T24997] ? do_syscall_64+0xb6/0x160 [ 1084.900078][T24997] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1084.906146][T24997] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1084.911795][T24997] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1084.917953][T24997] ? stack_trace_save+0x11c/0x1b0 [ 1084.923000][T24997] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1084.928901][T24997] alloc_pages_current+0x68d/0x9a0 [ 1084.934023][T24997] push_pipe+0x660/0xbd0 [ 1084.938264][T24997] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1084.943913][T24997] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1084.949660][T24997] default_file_splice_read+0x294/0x1060 [ 1084.955317][T24997] ? security_file_permission+0x51f/0x6e0 [ 1084.961046][T24997] ? rw_verify_area+0x3a5/0x5e0 [ 1084.965899][T24997] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1084.971792][T24997] ? __ia32_sys_tee+0x160/0x160 [ 1084.976649][T24997] splice_direct_to_actor+0x587/0x1130 [ 1084.982111][T24997] ? do_splice_direct+0x580/0x580 [ 1084.987162][T24997] do_splice_direct+0x342/0x580 [ 1084.992039][T24997] do_sendfile+0x1010/0x1d20 [ 1084.996654][T24997] __se_sys_sendfile64+0x2bb/0x360 [ 1085.001964][T24997] ? syscall_return_slowpath+0x90/0x610 [ 1085.007604][T24997] __x64_sys_sendfile64+0x56/0x70 [ 1085.012656][T24997] do_syscall_64+0xb6/0x160 [ 1085.017189][T24997] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1085.023077][T24997] RIP: 0033:0x459f39 [ 1085.026970][T24997] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1085.047005][T24997] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1085.055413][T24997] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1085.063380][T24997] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1085.071347][T24997] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1085.079350][T24997] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1085.087319][T24997] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1085.095360][T25004] CPU: 1 PID: 25004 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1085.103332][T25004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.113424][T25004] Call Trace: [ 1085.116791][T25004] dump_stack+0x191/0x1f0 [ 1085.121196][T25004] should_fail+0xa3f/0xa50 [ 1085.125702][T25004] __should_failslab+0x264/0x280 [ 1085.130718][T25004] should_failslab+0x29/0x70 [ 1085.135389][T25004] kmem_cache_alloc_trace+0xf7/0xd20 [ 1085.140850][T25004] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1085.146991][T25004] ? kasan_kmalloc+0xd/0x30 [ 1085.151536][T25004] ? copy_net_ns+0x2fa/0x970 [ 1085.156151][T25004] ? copy_net_ns+0x252/0x970 [ 1085.160784][T25004] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1085.166707][T25004] copy_net_ns+0x2fa/0x970 [ 1085.171166][T25004] create_new_namespaces+0x8d8/0xda0 [ 1085.176501][T25004] unshare_nsproxy_namespaces+0x25e/0x340 [ 1085.182252][T25004] ksys_unshare+0x883/0x1110 [ 1085.186882][T25004] __se_sys_unshare+0x41/0x60 [ 1085.191582][T25004] __x64_sys_unshare+0x32/0x50 [ 1085.196371][T25004] do_syscall_64+0xb6/0x160 [ 1085.200899][T25004] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1085.206806][T25004] RIP: 0033:0x459f39 [ 1085.210730][T25004] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:05:20 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) mount$fuseblk(&(0x7f0000000580)='/dev/loop0\x00', &(0x7f00000005c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="89"], 0x1) [ 1085.230531][T25004] RSP: 002b:00007f6cb02b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1085.238988][T25004] RAX: ffffffffffffffda RBX: 00007f6cb02b6c90 RCX: 0000000000459f39 [ 1085.246974][T25004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1085.254958][T25004] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1085.263056][T25004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02b76d4 [ 1085.271040][T25004] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000006 00:05:20 executing program 1 (fault-call:2 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffceb, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x40) [ 1085.452932][T25014] FAULT_INJECTION: forcing a failure. [ 1085.452932][T25014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1085.466931][T25014] CPU: 0 PID: 25014 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1085.474870][T25014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.484946][T25014] Call Trace: [ 1085.488272][T25014] dump_stack+0x191/0x1f0 [ 1085.492638][T25014] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1085.498589][T25014] should_fail+0xa3f/0xa50 [ 1085.503052][T25014] should_fail_alloc_page+0x1fb/0x270 [ 1085.508455][T25014] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1085.513945][T25014] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1085.519956][T25014] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1085.525959][T25014] ? kmsan_slab_alloc+0xaa/0x120 [ 1085.530914][T25014] ? __kmalloc_node+0xd7a/0x1380 [ 1085.535881][T25014] ? kvmalloc_node+0x19f/0x3d0 [ 1085.540667][T25014] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1085.546605][T25014] ? default_file_splice_read+0x294/0x1060 [ 1085.552438][T25014] ? splice_direct_to_actor+0x587/0x1130 [ 1085.558095][T25014] ? do_splice_direct+0x342/0x580 [ 1085.563141][T25014] ? do_sendfile+0x1010/0x1d20 [ 1085.567928][T25014] ? __se_sys_sendfile64+0x2bb/0x360 [ 1085.573233][T25014] ? __x64_sys_sendfile64+0x56/0x70 [ 1085.578472][T25014] ? do_syscall_64+0xb6/0x160 [ 1085.583174][T25014] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1085.589423][T25014] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1085.595112][T25014] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1085.601299][T25014] ? stack_trace_save+0x11c/0x1b0 [ 1085.606374][T25014] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1085.612304][T25014] alloc_pages_current+0x68d/0x9a0 [ 1085.617455][T25014] push_pipe+0x660/0xbd0 [ 1085.621733][T25014] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1085.627406][T25014] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1085.633183][T25014] default_file_splice_read+0x294/0x1060 [ 1085.638869][T25014] ? security_file_permission+0x51f/0x6e0 [ 1085.644624][T25014] ? rw_verify_area+0x3a5/0x5e0 [ 1085.649512][T25014] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1085.655433][T25014] ? __ia32_sys_tee+0x160/0x160 [ 1085.660313][T25014] splice_direct_to_actor+0x587/0x1130 [ 1085.665806][T25014] ? do_splice_direct+0x580/0x580 [ 1085.670885][T25014] do_splice_direct+0x342/0x580 [ 1085.675778][T25014] do_sendfile+0x1010/0x1d20 [ 1085.680423][T25014] __se_sys_sendfile64+0x2bb/0x360 [ 1085.685561][T25014] ? syscall_return_slowpath+0x90/0x610 [ 1085.691137][T25014] __x64_sys_sendfile64+0x56/0x70 [ 1085.696181][T25014] do_syscall_64+0xb6/0x160 [ 1085.700726][T25014] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1085.706662][T25014] RIP: 0033:0x459f39 [ 1085.710589][T25014] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1085.730209][T25014] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1085.738645][T25014] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1085.746630][T25014] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 00:05:20 executing program 5 (fault-call:15 fault-nth:4): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1085.754614][T25014] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1085.762602][T25014] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1085.770590][T25014] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:05:20 executing program 4: socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0045878, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[]}}, 0x0) 00:05:20 executing program 3: [ 1085.865966][T19704] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1085.944629][T25027] FAULT_INJECTION: forcing a failure. [ 1085.944629][T25027] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.957572][T25027] CPU: 1 PID: 25027 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1085.965501][T25027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.975573][T25027] Call Trace: [ 1085.978920][T25027] dump_stack+0x191/0x1f0 [ 1085.983734][T25027] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1085.989676][T25027] should_fail+0xa3f/0xa50 [ 1085.994136][T25027] __should_failslab+0x264/0x280 [ 1085.999106][T25027] should_failslab+0x29/0x70 [ 1086.003718][T25027] kmem_cache_alloc+0xd6/0xd10 [ 1086.008508][T25027] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1086.014680][T25027] ? proc_net_ns_init+0x74/0x690 [ 1086.019655][T25027] ? single_release_net+0x140/0x140 [ 1086.024871][T25027] proc_net_ns_init+0x74/0x690 [ 1086.029667][T25027] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1086.035583][T25027] ? single_release_net+0x140/0x140 [ 1086.040807][T25027] ops_init+0x2d3/0x730 [ 1086.045004][T25027] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1086.050922][T25027] setup_net+0x28e/0x12a0 [ 1086.055280][T25027] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1086.061481][T25027] ? down_read_killable+0x12e/0x300 [ 1086.066712][T25027] copy_net_ns+0x73e/0x970 [ 1086.071167][T25027] create_new_namespaces+0x8d8/0xda0 [ 1086.076496][T25027] unshare_nsproxy_namespaces+0x25e/0x340 [ 1086.082244][T25027] ksys_unshare+0x883/0x1110 [ 1086.086868][T25027] __se_sys_unshare+0x41/0x60 [ 1086.091567][T25027] __x64_sys_unshare+0x32/0x50 [ 1086.096359][T25027] do_syscall_64+0xb6/0x160 [ 1086.100893][T25027] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1086.106799][T25027] RIP: 0033:0x459f39 [ 1086.110719][T25027] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1086.130343][T25027] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1086.138779][T25027] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1086.146764][T25027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1086.154751][T25027] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1086.162740][T25027] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1086.170725][T25027] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1086.372017][T19704] usb 3-1: not running at top speed; connect to a high speed hub [ 1086.452044][T19704] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 615, setting to 64 [ 1086.463192][T19704] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 151, setting to 64 [ 1086.474377][T19704] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1086.632246][T19704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1086.641380][T19704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.649614][T19704] usb 3-1: Product: Щ [ 1086.653814][T19704] usb 3-1: Manufacturer: 짩❧탵镅簉匬ꦱ璲✼霓섵Ꮔꏅਁ牪昐栊瞒彧⼚ດ쿡เꌣ큅)㙐᳀址భ掵㘉쇪ᙋ呇⠢Ⴀ統䒖 [ 1086.669874][T19704] usb 3-1: SerialNumber: syz [ 1087.011896][T19704] usblp: can't set desired altsetting 255 on interface 0 [ 1087.023830][T19704] usb 3-1: USB disconnect, device number 23 [ 1087.711909][T24899] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1088.022234][T24899] usb 3-1: device descriptor read/all, error -71 00:05:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fb800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x18, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x4, 0x11}]}, 0x18}, 0x1, 0x6087ffffffff}, 0x0) 00:05:24 executing program 3: 00:05:24 executing program 1 (fault-call:2 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:24 executing program 2: 00:05:24 executing program 5 (fault-call:15 fault-nth:5): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1089.288754][T25043] FAULT_INJECTION: forcing a failure. [ 1089.288754][T25043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1089.302022][T25043] CPU: 0 PID: 25043 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1089.309916][T25043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.319980][T25043] Call Trace: [ 1089.323289][T25043] dump_stack+0x191/0x1f0 [ 1089.327644][T25043] should_fail+0xa3f/0xa50 [ 1089.332087][T25043] should_fail_alloc_page+0x1fb/0x270 [ 1089.337481][T25043] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1089.342958][T25043] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.348867][T25043] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1089.354845][T25043] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1089.360996][T25043] ? prep_new_page+0x792/0x9b0 [ 1089.365788][T25043] ? get_page_from_freelist+0x11d3/0x19f0 [ 1089.371544][T25043] kmsan_alloc_page+0xc3/0x360 [ 1089.376329][T25043] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.382219][T25043] __alloc_pages_nodemask+0x149d/0x60c0 [ 1089.387772][T25043] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1089.393769][T25043] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1089.399743][T25043] ? kmsan_slab_alloc+0xaa/0x120 [ 1089.404669][T25043] ? __kmalloc_node+0xd7a/0x1380 [ 1089.409608][T25043] ? kvmalloc_node+0x19f/0x3d0 [ 1089.414391][T25043] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1089.420318][T25043] ? default_file_splice_read+0x294/0x1060 [ 1089.426131][T25043] ? splice_direct_to_actor+0x587/0x1130 [ 1089.431766][T25043] ? do_splice_direct+0x342/0x580 [ 1089.436782][T25043] ? do_sendfile+0x1010/0x1d20 [ 1089.441549][T25043] ? __se_sys_sendfile64+0x2bb/0x360 [ 1089.446824][T25043] ? __x64_sys_sendfile64+0x56/0x70 [ 1089.452013][T25043] ? do_syscall_64+0xb6/0x160 [ 1089.456691][T25043] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1089.462749][T25043] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1089.468385][T25043] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1089.474531][T25043] ? stack_trace_save+0x11c/0x1b0 [ 1089.479560][T25043] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.485462][T25043] alloc_pages_current+0x68d/0x9a0 [ 1089.490683][T25043] push_pipe+0x660/0xbd0 [ 1089.494915][T25043] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1089.500547][T25043] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1089.506277][T25043] default_file_splice_read+0x294/0x1060 [ 1089.511920][T25043] ? security_file_permission+0x51f/0x6e0 [ 1089.517638][T25043] ? rw_verify_area+0x3a5/0x5e0 [ 1089.522482][T25043] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.528365][T25043] ? __ia32_sys_tee+0x160/0x160 [ 1089.533219][T25043] splice_direct_to_actor+0x587/0x1130 [ 1089.538668][T25043] ? do_splice_direct+0x580/0x580 [ 1089.543703][T25043] do_splice_direct+0x342/0x580 [ 1089.548557][T25043] do_sendfile+0x1010/0x1d20 [ 1089.553418][T25043] __se_sys_sendfile64+0x2bb/0x360 [ 1089.558523][T25043] ? syscall_return_slowpath+0x90/0x610 [ 1089.564062][T25043] __x64_sys_sendfile64+0x56/0x70 [ 1089.569807][T25043] do_syscall_64+0xb6/0x160 [ 1089.574343][T25043] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1089.580231][T25043] RIP: 0033:0x459f39 [ 1089.584125][T25043] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.603726][T25043] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1089.612132][T25043] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1089.620094][T25043] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1089.628067][T25043] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:05:24 executing program 3: [ 1089.636038][T25043] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1089.644016][T25043] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1089.699081][T25039] FAULT_INJECTION: forcing a failure. [ 1089.699081][T25039] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.713805][T25039] CPU: 0 PID: 25039 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1089.721764][T25039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.731847][T25039] Call Trace: [ 1089.735172][T25039] dump_stack+0x191/0x1f0 [ 1089.739539][T25039] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.745464][T25039] should_fail+0xa3f/0xa50 [ 1089.749924][T25039] __should_failslab+0x264/0x280 [ 1089.754914][T25039] should_failslab+0x29/0x70 [ 1089.759527][T25039] kmem_cache_alloc+0xd6/0xd10 [ 1089.764333][T25039] ? __proc_create+0xa13/0x14f0 [ 1089.769216][T25039] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.775150][T25039] __proc_create+0xa13/0x14f0 [ 1089.779868][T25039] ? kmsan_get_metadata+0x39/0x350 [ 1089.785030][T25039] proc_mkdir_data+0x14c/0x440 [ 1089.789825][T25039] proc_net_ns_init+0x417/0x690 [ 1089.794708][T25039] ? single_release_net+0x140/0x140 [ 1089.799931][T25039] ops_init+0x2d3/0x730 [ 1089.804133][T25039] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1089.810077][T25039] setup_net+0x28e/0x12a0 [ 1089.814447][T25039] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1089.820717][T25039] ? down_read_killable+0x12e/0x300 [ 1089.825963][T25039] copy_net_ns+0x73e/0x970 [ 1089.830419][T25039] create_new_namespaces+0x8d8/0xda0 [ 1089.835749][T25039] unshare_nsproxy_namespaces+0x25e/0x340 [ 1089.841497][T25039] ksys_unshare+0x883/0x1110 [ 1089.846129][T25039] __se_sys_unshare+0x41/0x60 [ 1089.850826][T25039] __x64_sys_unshare+0x32/0x50 [ 1089.855622][T25039] do_syscall_64+0xb6/0x160 [ 1089.860152][T25039] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1089.866062][T25039] RIP: 0033:0x459f39 [ 1089.869985][T25039] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.889619][T25039] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 00:05:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffff31, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYBLOB="db30ebe07abf1bfd099afec0819076da029ad351bd5a72dca5e56fe21bf4623bd15f0a6dab50dedfdad9007792f2428ad18957782ea60450e1555874d137100d7f71440b264c2423317d86ee85a59bbcc6766e6e042c2fcc1cedb37e3db0daa48fc09163c6858ded3e90389ec488d8d2362f2d64149b908037aff5465ab4e309e3131e2bd9cd1b0a2978985a6468c597f07eb6a8a152e5b7456921f54a95141e571971de726b877c2f288f4bc00ce42f0a39edd6efe6e1a519e3a8fa66868167630b88fb5dfb4a7c041ea183ddc9fe32bb", @ANYRES16=0x0]}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000002c0)={0xfffffffa, 0xd1, "ff0d8b69dcfec24ed42165ef8d80bdce3b86c625a8124003774c411afdd3125d3e87db631edebf595225a3ea2981aecc75a1aadb156af61fd2df5bcb25fa511ba4aa5a700b3e980c7e4327945104226f350d29341919b8e23deca953bf85a38076b7aaf27265c71d516bc635feff6d5232b432f0b1e7053cff742a6490f3ecccf2c6eabe6e9c660dd8766e12a6a0b39f96273118e4b7f87ef48d2383f7cfad6ac83237cff98c0693789b09d2782f439fc3e65e67f06bc10ec35fd0648f871b9fd69085e54a1b821518522e0b450076793d"}) 00:05:25 executing program 2: [ 1089.898060][T25039] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1089.906142][T25039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1089.914130][T25039] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1089.922119][T25039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1089.930121][T25039] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:05:25 executing program 1 (fault-call:2 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:25 executing program 3: 00:05:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000003d5ae663b26b34cddc06e4eafc53052210005fba00004eddd3049e62c0a4367d552bd28facdd00"/52, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b00000000006bf7bd458024b70d1ea4699d3bfb7c0ae80ab5878036e85dcc34cb6bdd39f3d34cbd39072f99343bbf7c811d50a7c5eccb2304771fd8cf"], 0x28}}, 0x0) 00:05:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000070000008608b09a5bebfed47849cf1fe64a31da57be75867340f5756b55c0485914ca81f9db828e627f72e29d1f4a43c26fc2cfaea890c689c6f84f0df1e544b1158da3f7937ba0a21dc8f7a9eb2e940256292f4f259305a6bcfdf330b9183de72aa67653403b1a7de85b5558dd01731d136e82ceac591b69b5fbc69bb875ac8ac8c5dde073ba4fe980d4a4e48f"], 0x18}}], 0x2, 0x0) [ 1090.155791][T25056] FAULT_INJECTION: forcing a failure. [ 1090.155791][T25056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1090.169038][T25056] CPU: 1 PID: 25056 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1090.176912][T25056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.186950][T25056] Call Trace: [ 1090.190257][T25056] dump_stack+0x191/0x1f0 [ 1090.194757][T25056] should_fail+0xa3f/0xa50 [ 1090.199189][T25056] should_fail_alloc_page+0x1fb/0x270 [ 1090.204558][T25056] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1090.210011][T25056] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1090.216074][T25056] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1090.222047][T25056] ? prep_new_page+0x792/0x9b0 [ 1090.226811][T25056] ? get_page_from_freelist+0x11d3/0x19f0 [ 1090.232536][T25056] kmsan_alloc_page+0x131/0x360 [ 1090.237380][T25056] __alloc_pages_nodemask+0x149d/0x60c0 [ 1090.242915][T25056] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1090.248895][T25056] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1090.254864][T25056] ? kmsan_slab_alloc+0xaa/0x120 [ 1090.259789][T25056] ? __kmalloc_node+0xd7a/0x1380 [ 1090.264716][T25056] ? kvmalloc_node+0x19f/0x3d0 [ 1090.269468][T25056] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1090.275365][T25056] ? default_file_splice_read+0x294/0x1060 [ 1090.281160][T25056] ? splice_direct_to_actor+0x587/0x1130 [ 1090.286795][T25056] ? do_splice_direct+0x342/0x580 [ 1090.291806][T25056] ? do_sendfile+0x1010/0x1d20 [ 1090.296559][T25056] ? __se_sys_sendfile64+0x2bb/0x360 [ 1090.301847][T25056] ? __x64_sys_sendfile64+0x56/0x70 [ 1090.307031][T25056] ? do_syscall_64+0xb6/0x160 [ 1090.311702][T25056] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1090.317764][T25056] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1090.323400][T25056] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1090.329540][T25056] ? stack_trace_save+0x11c/0x1b0 [ 1090.334572][T25056] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1090.340457][T25056] alloc_pages_current+0x68d/0x9a0 [ 1090.345566][T25056] push_pipe+0x660/0xbd0 [ 1090.349796][T25056] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1090.355431][T25056] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1090.361173][T25056] default_file_splice_read+0x294/0x1060 [ 1090.366816][T25056] ? security_file_permission+0x51f/0x6e0 [ 1090.372529][T25056] ? rw_verify_area+0x3a5/0x5e0 [ 1090.377459][T25056] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1090.383340][T25056] ? __ia32_sys_tee+0x160/0x160 [ 1090.388183][T25056] splice_direct_to_actor+0x587/0x1130 [ 1090.393638][T25056] ? do_splice_direct+0x580/0x580 [ 1090.398672][T25056] do_splice_direct+0x342/0x580 [ 1090.403525][T25056] do_sendfile+0x1010/0x1d20 [ 1090.408145][T25056] __se_sys_sendfile64+0x2bb/0x360 [ 1090.413273][T25056] ? syscall_return_slowpath+0x90/0x610 [ 1090.418823][T25056] __x64_sys_sendfile64+0x56/0x70 [ 1090.423855][T25056] do_syscall_64+0xb6/0x160 [ 1090.428359][T25056] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1090.434247][T25056] RIP: 0033:0x459f39 [ 1090.438144][T25056] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1090.457769][T25056] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1090.466188][T25056] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1090.474148][T25056] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1090.482105][T25056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1090.490083][T25056] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1090.498043][T25056] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:05:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x18, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x4, 0x11, [@generic]}]}, 0x18}, 0x1, 0x6087ffffffff}, 0x0) 00:05:29 executing program 5 (fault-call:15 fault-nth:6): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x100000000) 00:05:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000001c0)=0x400000000008, 0x4) 00:05:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x5) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0x101, "4c4f324d240f591b8f5fd0ed9c4d43c0f41851e8ee675782a0dccfbd1e31dffd", 0xde6ce3fae6e5f2db, 0x40, 0x1, 0x0, 0x2, 0x0, 0xfffffffe, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000d7a254448f87555600000000e3ff", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:29 executing program 1 (fault-call:2 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1094.155286][T25074] FAULT_INJECTION: forcing a failure. [ 1094.155286][T25074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1094.168993][T25074] CPU: 1 PID: 25074 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1094.176944][T25074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.187044][T25074] Call Trace: [ 1094.190509][T25074] dump_stack+0x191/0x1f0 [ 1094.192821][T25075] FAULT_INJECTION: forcing a failure. [ 1094.192821][T25075] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.194908][T25074] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1094.194978][T25074] should_fail+0xa3f/0xa50 [ 1094.217901][T25074] should_fail_alloc_page+0x1fb/0x270 [ 1094.223343][T25074] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1094.228855][T25074] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1094.234885][T25074] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1094.240908][T25074] ? kmsan_slab_alloc+0xaa/0x120 [ 1094.245890][T25074] ? __kmalloc_node+0xd7a/0x1380 [ 1094.250880][T25074] ? kvmalloc_node+0x19f/0x3d0 [ 1094.255708][T25074] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1094.261683][T25074] ? default_file_splice_read+0x294/0x1060 [ 1094.267541][T25074] ? splice_direct_to_actor+0x587/0x1130 [ 1094.273216][T25074] ? do_splice_direct+0x342/0x580 [ 1094.278281][T25074] ? do_sendfile+0x1010/0x1d20 [ 1094.283089][T25074] ? __se_sys_sendfile64+0x2bb/0x360 [ 1094.288417][T25074] ? __x64_sys_sendfile64+0x56/0x70 [ 1094.293656][T25074] ? do_syscall_64+0xb6/0x160 [ 1094.298382][T25074] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1094.304501][T25074] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1094.310210][T25074] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1094.316416][T25074] ? stack_trace_save+0x11c/0x1b0 [ 1094.321518][T25074] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1094.327468][T25074] alloc_pages_current+0x68d/0x9a0 [ 1094.332638][T25074] push_pipe+0x660/0xbd0 [ 1094.336969][T25074] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1094.342699][T25074] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1094.348536][T25074] default_file_splice_read+0x294/0x1060 [ 1094.354259][T25074] ? security_file_permission+0x51f/0x6e0 [ 1094.360036][T25074] ? rw_verify_area+0x3a5/0x5e0 [ 1094.364948][T25074] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1094.370921][T25074] ? __ia32_sys_tee+0x160/0x160 [ 1094.375833][T25074] splice_direct_to_actor+0x587/0x1130 [ 1094.381347][T25074] ? do_splice_direct+0x580/0x580 [ 1094.386484][T25074] do_splice_direct+0x342/0x580 [ 1094.391433][T25074] do_sendfile+0x1010/0x1d20 [ 1094.396136][T25074] __se_sys_sendfile64+0x2bb/0x360 [ 1094.401311][T25074] ? syscall_return_slowpath+0x90/0x610 [ 1094.406923][T25074] __x64_sys_sendfile64+0x56/0x70 [ 1094.411992][T25074] do_syscall_64+0xb6/0x160 [ 1094.416570][T25074] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1094.422503][T25074] RIP: 0033:0x459f39 [ 1094.426448][T25074] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.446375][T25074] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1094.454836][T25074] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1094.462842][T25074] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1094.470853][T25074] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1094.478880][T25074] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1094.486899][T25074] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1094.494952][T25075] CPU: 0 PID: 25075 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1094.502894][T25075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.512992][T25075] Call Trace: [ 1094.516351][T25075] dump_stack+0x191/0x1f0 [ 1094.520758][T25075] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1094.526753][T25075] should_fail+0xa3f/0xa50 [ 1094.531264][T25075] __should_failslab+0x264/0x280 [ 1094.536279][T25075] should_failslab+0x29/0x70 [ 1094.540929][T25075] kmem_cache_alloc+0xd6/0xd10 [ 1094.545760][T25075] ? __proc_create+0xa13/0x14f0 [ 1094.550758][T25075] ? nf_hook_entry_head+0x3c0/0x3c0 [ 1094.556064][T25075] ? kmsan_get_shadow_origin_ptr+0x57/0x4b0 [ 1094.562044][T25075] __proc_create+0xa13/0x14f0 [ 1094.566758][T25075] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1094.572438][T25075] proc_mkdir_data+0x14c/0x440 [ 1094.577352][T25075] netfilter_net_init+0x38b/0x5d0 [ 1094.582415][T25075] ? nf_hook_entry_head+0x3c0/0x3c0 [ 1094.587644][T25075] ops_init+0x2d3/0x730 [ 1094.591833][T25075] ? rtnl_net_dumpid+0x1090/0x1180 [ 1094.596987][T25075] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1094.602916][T25075] setup_net+0x28e/0x12a0 [ 1094.607313][T25075] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1094.613507][T25075] ? down_read_killable+0x12e/0x300 [ 1094.618740][T25075] copy_net_ns+0x73e/0x970 [ 1094.623214][T25075] create_new_namespaces+0x8d8/0xda0 [ 1094.628544][T25075] unshare_nsproxy_namespaces+0x25e/0x340 [ 1094.634294][T25075] ksys_unshare+0x883/0x1110 [ 1094.638923][T25075] __se_sys_unshare+0x41/0x60 [ 1094.643621][T25075] __x64_sys_unshare+0x32/0x50 [ 1094.648420][T25075] do_syscall_64+0xb6/0x160 [ 1094.652981][T25075] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1094.658886][T25075] RIP: 0033:0x459f39 [ 1094.662806][T25075] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.682431][T25075] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1094.690873][T25075] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1094.698860][T25075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 00:05:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001fe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000a625f5ff07001b0000260000"], 0x28}}, 0x0) [ 1094.706847][T25075] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1094.714845][T25075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1094.722846][T25075] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:05:29 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f00000001c0)=""/243, 0xf3) 00:05:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x100000000) 00:05:29 executing program 1 (fault-call:2 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:29 executing program 5 (fault-call:15 fault-nth:7): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010605fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1094.734620][T25075] cannot create netfilter proc entry [ 1094.939966][T25094] FAULT_INJECTION: forcing a failure. [ 1094.939966][T25094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1094.958499][T25094] CPU: 0 PID: 25094 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1094.966388][T25094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.976429][T25094] Call Trace: [ 1094.979714][T25094] dump_stack+0x191/0x1f0 [ 1094.984039][T25094] should_fail+0xa3f/0xa50 [ 1094.988456][T25094] should_fail_alloc_page+0x1fb/0x270 [ 1094.993834][T25094] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1094.999290][T25094] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.005177][T25094] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1095.011149][T25094] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1095.017293][T25094] ? prep_new_page+0x792/0x9b0 [ 1095.022059][T25094] ? get_page_from_freelist+0x11d3/0x19f0 [ 1095.029186][T25094] kmsan_alloc_page+0xc3/0x360 [ 1095.033954][T25094] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.039840][T25094] __alloc_pages_nodemask+0x149d/0x60c0 [ 1095.045378][T25094] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1095.051345][T25094] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1095.057314][T25094] ? kmsan_slab_alloc+0xaa/0x120 [ 1095.062247][T25094] ? __kmalloc_node+0xd7a/0x1380 [ 1095.067174][T25094] ? kvmalloc_node+0x19f/0x3d0 [ 1095.071935][T25094] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1095.077815][T25094] ? default_file_splice_read+0x294/0x1060 [ 1095.083611][T25094] ? splice_direct_to_actor+0x587/0x1130 [ 1095.089230][T25094] ? do_splice_direct+0x342/0x580 [ 1095.094262][T25094] ? do_sendfile+0x1010/0x1d20 [ 1095.099011][T25094] ? __se_sys_sendfile64+0x2bb/0x360 [ 1095.104282][T25094] ? __x64_sys_sendfile64+0x56/0x70 [ 1095.109469][T25094] ? do_syscall_64+0xb6/0x160 [ 1095.114141][T25094] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1095.120199][T25094] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1095.125838][T25094] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1095.131997][T25094] ? stack_trace_save+0x11c/0x1b0 [ 1095.137024][T25094] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.142915][T25094] alloc_pages_current+0x68d/0x9a0 [ 1095.148025][T25094] push_pipe+0x660/0xbd0 [ 1095.152261][T25094] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1095.157903][T25094] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1095.163640][T25094] default_file_splice_read+0x294/0x1060 [ 1095.169279][T25094] ? security_file_permission+0x51f/0x6e0 [ 1095.174997][T25094] ? rw_verify_area+0x3a5/0x5e0 [ 1095.179841][T25094] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.185735][T25094] ? __ia32_sys_tee+0x160/0x160 [ 1095.190773][T25094] splice_direct_to_actor+0x587/0x1130 [ 1095.196222][T25094] ? do_splice_direct+0x580/0x580 [ 1095.201257][T25094] do_splice_direct+0x342/0x580 [ 1095.206111][T25094] do_sendfile+0x1010/0x1d20 [ 1095.210721][T25094] __se_sys_sendfile64+0x2bb/0x360 [ 1095.215823][T25094] ? syscall_return_slowpath+0x90/0x610 [ 1095.221378][T25094] __x64_sys_sendfile64+0x56/0x70 [ 1095.226411][T25094] do_syscall_64+0xb6/0x160 [ 1095.230906][T25094] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1095.236787][T25094] RIP: 0033:0x459f39 [ 1095.240671][T25094] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.260368][T25094] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1095.268867][T25094] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1095.278149][T25094] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1095.286116][T25094] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1095.294190][T25094] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1095.302321][T25094] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1095.330850][T25093] FAULT_INJECTION: forcing a failure. [ 1095.330850][T25093] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.343732][T25093] CPU: 1 PID: 25093 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1095.351656][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.361916][T25093] Call Trace: [ 1095.365675][T25093] dump_stack+0x191/0x1f0 [ 1095.370037][T25093] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.375992][T25093] should_fail+0xa3f/0xa50 [ 1095.380464][T25093] __should_failslab+0x264/0x280 [ 1095.385443][T25093] should_failslab+0x29/0x70 [ 1095.390069][T25093] kmem_cache_alloc+0xd6/0xd10 [ 1095.394892][T25093] ? __proc_create+0xa13/0x14f0 [ 1095.399773][T25093] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.405852][T25093] __proc_create+0xa13/0x14f0 [ 1095.410582][T25093] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.416552][T25093] proc_create_reg+0x195/0x2a0 [ 1095.421363][T25093] proc_create_net_data+0x12f/0x330 [ 1095.426613][T25093] nf_log_net_init+0xb0/0xad0 [ 1095.431324][T25093] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.437245][T25093] ? local_bh_enable+0x40/0x40 [ 1095.442042][T25093] ops_init+0x2d3/0x730 [ 1095.446244][T25093] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1095.452170][T25093] setup_net+0x28e/0x12a0 [ 1095.456532][T25093] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1095.462808][T25093] ? down_read_killable+0x12e/0x300 [ 1095.468040][T25093] copy_net_ns+0x73e/0x970 [ 1095.472509][T25093] create_new_namespaces+0x8d8/0xda0 [ 1095.477837][T25093] unshare_nsproxy_namespaces+0x25e/0x340 [ 1095.483608][T25093] ksys_unshare+0x883/0x1110 [ 1095.488236][T25093] __se_sys_unshare+0x41/0x60 [ 1095.492945][T25093] __x64_sys_unshare+0x32/0x50 [ 1095.497735][T25093] do_syscall_64+0xb6/0x160 [ 1095.502292][T25093] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1095.508203][T25093] RIP: 0033:0x459f39 [ 1095.512124][T25093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.531746][T25093] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1095.540179][T25093] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1095.548162][T25093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1095.556148][T25093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1095.564134][T25093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1095.572121][T25093] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:05:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x18, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x4, 0x11, [@generic]}]}, 0x18}, 0x1, 0x6087ffffffff}, 0x0) 00:05:33 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x3f, 0x6, 0x1f, 0x4, 0x3, 0x7, 0x81, 0x3f}, 0xb) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffe) 00:05:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_NF_CALL_IP6TABLES={0x8}, @IFLA_BR_NF_CALL_IPTABLES={0x8, 0x24, 0x4}]}}}]}, 0x44}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 00:05:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000fa0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:33 executing program 1 (fault-call:2 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:33 executing program 5 (fault-call:15 fault-nth:8): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1098.321476][T25114] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 1098.329874][T25114] netlink: 'syz-executor.2': attribute type 36 has an invalid length. [ 1098.336629][T25110] FAULT_INJECTION: forcing a failure. [ 1098.336629][T25110] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.352003][T25110] CPU: 0 PID: 25110 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1098.355210][T25115] FAULT_INJECTION: forcing a failure. [ 1098.355210][T25115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1098.359941][T25110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.383185][T25110] Call Trace: [ 1098.386714][T25110] dump_stack+0x191/0x1f0 [ 1098.391092][T25110] should_fail+0xa3f/0xa50 [ 1098.395556][T25110] __should_failslab+0x264/0x280 [ 1098.400527][T25110] should_failslab+0x29/0x70 [ 1098.405146][T25110] __kmalloc_track_caller+0x1ad/0xea0 [ 1098.410548][T25110] ? proc_register+0x66f/0x8c0 [ 1098.415340][T25110] ? nf_log_net_init+0x155/0xad0 [ 1098.420327][T25110] kmemdup+0x95/0x140 [ 1098.424356][T25110] nf_log_net_init+0x155/0xad0 [ 1098.429153][T25110] ? kmsan_get_shadow_origin_ptr+0x184/0x4b0 [ 1098.435179][T25110] ? local_bh_enable+0x40/0x40 [ 1098.439989][T25110] ops_init+0x2d3/0x730 [ 1098.444188][T25110] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1098.450233][T25110] setup_net+0x28e/0x12a0 [ 1098.454596][T25110] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1098.460794][T25110] ? down_read_killable+0x12e/0x300 [ 1098.466027][T25110] copy_net_ns+0x73e/0x970 [ 1098.470502][T25110] create_new_namespaces+0x8d8/0xda0 [ 1098.475834][T25110] unshare_nsproxy_namespaces+0x25e/0x340 [ 1098.481584][T25110] ksys_unshare+0x883/0x1110 [ 1098.486220][T25110] __se_sys_unshare+0x41/0x60 [ 1098.490949][T25110] __x64_sys_unshare+0x32/0x50 [ 1098.495750][T25110] do_syscall_64+0xb6/0x160 [ 1098.500294][T25110] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1098.506201][T25110] RIP: 0033:0x459f39 [ 1098.510127][T25110] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1098.529748][T25110] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1098.538184][T25110] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1098.546257][T25110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1098.554241][T25110] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1098.562227][T25110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1098.570212][T25110] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1098.578213][T25115] CPU: 1 PID: 25115 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1098.586206][T25115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.596264][T25115] Call Trace: [ 1098.599575][T25115] dump_stack+0x191/0x1f0 [ 1098.603933][T25115] should_fail+0xa3f/0xa50 [ 1098.608373][T25115] should_fail_alloc_page+0x1fb/0x270 [ 1098.613760][T25115] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1098.619324][T25115] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1098.625237][T25115] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1098.631235][T25115] ? prep_new_page+0x792/0x9b0 [ 1098.636020][T25115] ? get_page_from_freelist+0x11d3/0x19f0 [ 1098.641774][T25115] kmsan_alloc_page+0x131/0x360 [ 1098.646641][T25115] __alloc_pages_nodemask+0x149d/0x60c0 [ 1098.652193][T25115] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1098.658162][T25115] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1098.664183][T25115] ? kmsan_slab_alloc+0xaa/0x120 [ 1098.669213][T25115] ? __kmalloc_node+0xd7a/0x1380 [ 1098.674142][T25115] ? kvmalloc_node+0x19f/0x3d0 [ 1098.678899][T25115] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1098.684784][T25115] ? default_file_splice_read+0x294/0x1060 [ 1098.690580][T25115] ? splice_direct_to_actor+0x587/0x1130 [ 1098.696203][T25115] ? do_splice_direct+0x342/0x580 [ 1098.701217][T25115] ? do_sendfile+0x1010/0x1d20 [ 1098.705966][T25115] ? __se_sys_sendfile64+0x2bb/0x360 [ 1098.711235][T25115] ? __x64_sys_sendfile64+0x56/0x70 [ 1098.716446][T25115] ? do_syscall_64+0xb6/0x160 [ 1098.721122][T25115] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1098.727185][T25115] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1098.732823][T25115] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1098.738976][T25115] ? stack_trace_save+0x11c/0x1b0 [ 1098.744005][T25115] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1098.749890][T25115] alloc_pages_current+0x68d/0x9a0 [ 1098.754998][T25115] push_pipe+0x660/0xbd0 [ 1098.759228][T25115] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1098.764861][T25115] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1098.770584][T25115] default_file_splice_read+0x294/0x1060 [ 1098.776224][T25115] ? security_file_permission+0x51f/0x6e0 [ 1098.781962][T25115] ? rw_verify_area+0x3a5/0x5e0 [ 1098.786803][T25115] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1098.792685][T25115] ? __ia32_sys_tee+0x160/0x160 [ 1098.797541][T25115] splice_direct_to_actor+0x587/0x1130 [ 1098.802994][T25115] ? do_splice_direct+0x580/0x580 [ 1098.808027][T25115] do_splice_direct+0x342/0x580 [ 1098.812880][T25115] do_sendfile+0x1010/0x1d20 [ 1098.817477][T25115] __se_sys_sendfile64+0x2bb/0x360 [ 1098.822592][T25115] ? syscall_return_slowpath+0x90/0x610 [ 1098.828140][T25115] __x64_sys_sendfile64+0x56/0x70 [ 1098.833159][T25115] do_syscall_64+0xb6/0x160 [ 1098.837657][T25115] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1098.843534][T25115] RIP: 0033:0x459f39 [ 1098.847418][T25115] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:05:33 executing program 3: r0 = epoll_create1(0x100000) pwrite64(r0, &(0x7f00000000c0)="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", 0x1000, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/d\x89^idi#\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x5) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001140)={0x1, 0x1, 0x0, 0x2, 0x5}, 0xc) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000080)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) syz_usb_connect(0x0, 0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="12010000e06e2e08ac0549021cce00000001090212000100000000090000000003db02006a86ca7d0c8eeb3b156b507610b0fbbb07dc771c3f1949405e814467b14882107f284a5a8a8d229371bcda851957bef76f9d31552ed1c8590a05f0eba98d4ea562e74473fe15ae7ce7422de7f7c1c5cdc38e1696d6565a1408169f6ca31181e7166d5958fd1a1c0896163a501fa387e1cee4e65b2fab91df0efb5c81a928f4611670110e3dc037426b71b1bdf3c6d7ef4a8c9274"], 0x0) 00:05:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00000000000010000000000066ac4d2bf2f9f1c5111cd6d8a6d9df60e2ed146e0b7d05bca17c40e00f81a8aa89c196b7962089be2783f1eda2babb93", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1098.867106][T25115] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1098.875503][T25115] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1098.883462][T25115] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1098.891431][T25115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1098.899389][T25115] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1098.907354][T25115] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:05:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x0, 0x8e, 0x32, 0xf7, 0x20, 0xaf0, 0xd257, 0x4e87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x0, 0xff, 0xa5, 0x2c}}]}}]}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x1) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x8, 0x9, 0xd5, 0x1}, {0xd25e, 0xcf, 0x9, 0x3}, {0x200, 0x1, 0x9, 0xc005}, {0x849, 0x1, 0x20, 0x3}, {0x7, 0x66, 0x3, 0x8}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x11, "850200e21f57eab441f2e157038d3a0873"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:05:34 executing program 5 (fault-call:15 fault-nth:9): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:34 executing program 1 (fault-call:2 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x2, 0xe05, 0x3, r3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x6}, 0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}}, 0x0) [ 1099.140722][T25134] FAULT_INJECTION: forcing a failure. [ 1099.140722][T25134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1099.154241][T25134] CPU: 0 PID: 25134 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1099.162794][T25134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.172893][T25134] Call Trace: [ 1099.176252][T25134] dump_stack+0x191/0x1f0 [ 1099.176950][T25132] FAULT_INJECTION: forcing a failure. [ 1099.176950][T25132] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.180652][T25134] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1099.180725][T25134] should_fail+0xa3f/0xa50 [ 1099.203657][T25134] should_fail_alloc_page+0x1fb/0x270 [ 1099.209087][T25134] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1099.214603][T25134] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1099.220630][T25134] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1099.226838][T25134] ? kmsan_slab_alloc+0xaa/0x120 [ 1099.231814][T25134] ? __kmalloc_node+0xd7a/0x1380 [ 1099.236819][T25134] ? kvmalloc_node+0x19f/0x3d0 [ 1099.241640][T25134] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1099.247677][T25134] ? default_file_splice_read+0x294/0x1060 [ 1099.253535][T25134] ? splice_direct_to_actor+0x587/0x1130 [ 1099.259300][T25134] ? do_splice_direct+0x342/0x580 [ 1099.264367][T25134] ? do_sendfile+0x1010/0x1d20 [ 1099.269170][T25134] ? __se_sys_sendfile64+0x2bb/0x360 [ 1099.274498][T25134] ? __x64_sys_sendfile64+0x56/0x70 [ 1099.280196][T25134] ? do_syscall_64+0xb6/0x160 [ 1099.284941][T25134] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1099.291059][T25134] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1099.296767][T25134] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1099.302971][T25134] ? stack_trace_save+0x11c/0x1b0 [ 1099.308073][T25134] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1099.314040][T25134] alloc_pages_current+0x68d/0x9a0 [ 1099.319211][T25134] push_pipe+0x660/0xbd0 [ 1099.323501][T25134] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1099.329198][T25134] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1099.335001][T25134] default_file_splice_read+0x294/0x1060 [ 1099.340713][T25134] ? security_file_permission+0x51f/0x6e0 [ 1099.346489][T25134] ? rw_verify_area+0x3a5/0x5e0 [ 1099.351525][T25134] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1099.357483][T25134] ? __ia32_sys_tee+0x160/0x160 [ 1099.362393][T25134] splice_direct_to_actor+0x587/0x1130 [ 1099.367912][T25134] ? do_splice_direct+0x580/0x580 [ 1099.373025][T25134] do_splice_direct+0x342/0x580 [ 1099.377954][T25134] do_sendfile+0x1010/0x1d20 [ 1099.382657][T25134] __se_sys_sendfile64+0x2bb/0x360 [ 1099.387836][T25134] ? syscall_return_slowpath+0x90/0x610 [ 1099.393440][T25134] __x64_sys_sendfile64+0x56/0x70 [ 1099.398507][T25134] do_syscall_64+0xb6/0x160 [ 1099.403061][T25134] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1099.408988][T25134] RIP: 0033:0x459f39 [ 1099.412931][T25134] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1099.432593][T25134] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1099.441089][T25134] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1099.449101][T25134] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1099.457110][T25134] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1099.465124][T25134] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1099.473127][T25134] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1099.481177][T25132] CPU: 1 PID: 25132 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1099.489121][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.499218][T25132] Call Trace: [ 1099.502548][T25132] dump_stack+0x191/0x1f0 [ 1099.506942][T25132] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1099.512869][T25132] should_fail+0xa3f/0xa50 [ 1099.517340][T25132] __should_failslab+0x264/0x280 [ 1099.522307][T25132] should_failslab+0x29/0x70 [ 1099.526918][T25132] __kmalloc+0xae/0x430 [ 1099.531196][T25132] ? kzalloc+0x53/0xb0 [ 1099.535300][T25132] kzalloc+0x53/0xb0 [ 1099.539217][T25132] __register_sysctl_table+0x175/0x2880 [ 1099.544801][T25132] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1099.550888][T25132] ? __kmalloc_track_caller+0x226/0xea0 [ 1099.556457][T25132] ? proc_register+0x66f/0x8c0 [ 1099.561257][T25132] ? kmsan_get_metadata+0x39/0x350 [ 1099.566419][T25132] register_net_sysctl+0x9f/0xb0 [ 1099.571402][T25132] nf_log_net_init+0x661/0xad0 [ 1099.576198][T25132] ? local_bh_enable+0x40/0x40 [ 1099.581123][T25132] ops_init+0x2d3/0x730 [ 1099.585338][T25132] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1099.591286][T25132] setup_net+0x28e/0x12a0 [ 1099.595663][T25132] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1099.601851][T25132] ? down_read_killable+0x12e/0x300 [ 1099.607088][T25132] copy_net_ns+0x73e/0x970 [ 1099.611562][T25132] create_new_namespaces+0x8d8/0xda0 [ 1099.616901][T25132] unshare_nsproxy_namespaces+0x25e/0x340 [ 1099.622658][T25132] ksys_unshare+0x883/0x1110 [ 1099.627284][T25132] __se_sys_unshare+0x41/0x60 [ 1099.631984][T25132] __x64_sys_unshare+0x32/0x50 [ 1099.636768][T25132] do_syscall_64+0xb6/0x160 [ 1099.641299][T25132] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1099.647210][T25132] RIP: 0033:0x459f39 [ 1099.651129][T25132] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1099.670764][T25132] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1099.679202][T25132] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1099.687189][T25132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1099.695177][T25132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1099.703163][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1099.711149][T25132] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1099.792456][T19704] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1099.794853][T24899] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1100.032157][T19704] usb 4-1: Using ep0 maxpacket: 8 [ 1100.052386][T24899] usb 3-1: Using ep0 maxpacket: 32 [ 1100.152122][T19704] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.161353][T19704] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=ce.1c [ 1100.170592][T19704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.172030][T24899] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 1100.180731][T19704] usb 4-1: config 0 descriptor?? [ 1100.186994][T24899] usb 3-1: config 0 has no interface number 0 [ 1100.198143][T24899] usb 3-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1100.207332][T24899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.216910][T24899] usb 3-1: config 0 descriptor?? [ 1100.445037][T19704] usb 4-1: USB disconnect, device number 26 [ 1100.482464][T24899] hso 3-1:0.15: Failed to find INT IN ep [ 1100.685247][T24899] usb 3-1: USB disconnect, device number 26 [ 1101.231967][T19704] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1101.451933][T24899] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1101.473555][T19704] usb 4-1: Using ep0 maxpacket: 8 [ 1101.532363][T19704] usb 4-1: device descriptor read/all, error -71 [ 1101.702183][T24899] usb 3-1: Using ep0 maxpacket: 32 [ 1101.822274][T24899] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 1101.830596][T24899] usb 3-1: config 0 has no interface number 0 [ 1101.836926][T24899] usb 3-1: New USB device found, idVendor=0af0, idProduct=d257, bcdDevice=4e.87 [ 1101.846149][T24899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.856735][T24899] usb 3-1: config 0 descriptor?? [ 1102.136344][T24899] usb 3-1: USB disconnect, device number 27 00:05:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x18, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x4, 0x11, [@generic]}]}, 0x18}, 0x1, 0x6087ffffffff}, 0x0) 00:05:41 executing program 5 (fault-call:15 fault-nth:10): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:41 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0xc0000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000064e9a22810dce19b121b"], 0x28}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x94100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18, 0x2, 0x1, 0x8, 0x203, 0x1, 0x7fffffff, [], 0x0, r2, 0x1, 0x5}, 0x3c) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x7ebb00) 00:05:41 executing program 1 (fault-call:2 fault-nth:13): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) openat$cgroup_ro(r2, &(0x7f0000000440)='/.roup.stat\x00<#\xfbWKM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9cN\xd4\x01\x00\xe8\x9ej5|\x00\b\x00\x00\x00\x00\x00\x00\x00\x1e|3P$\xd5s\\t\xd0\xaf?\xdd\xe7?\x16\x11,\xd4h\xdd\xf1\xb8\xf0*\xb6\xb3\xc0\xd6\x9b\x86R\x99\x8d_\xfd\xd9\xe8!%\x01\xde\xb8\xe5\xbf\xbf\b~\xff\x0et9V\xac\xa3\x8f\xf6x\b\xddF(\xa1*\x99\xfb\xb83bF\a\x8aG\xf3\xd6\xd6\xf5\x15\xa6SS\x06J\xc6\xa2z\x99\x87d,/\xe8\x8d', 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 00:05:41 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x31, 0x83, 0x8d, 0x8, 0x78c, 0x1000, 0xc85b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xeb, 0x2d, 0x3b, 0x0, [], [{{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) accept$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e) [ 1106.118276][T25154] FAULT_INJECTION: forcing a failure. [ 1106.118276][T25154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1106.131520][T25154] CPU: 0 PID: 25154 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1106.139396][T25154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.149436][T25154] Call Trace: [ 1106.152724][T25154] dump_stack+0x191/0x1f0 [ 1106.157050][T25154] should_fail+0xa3f/0xa50 [ 1106.161480][T25154] should_fail_alloc_page+0x1fb/0x270 [ 1106.166846][T25154] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1106.172298][T25154] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1106.178187][T25154] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1106.184174][T25154] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1106.190320][T25154] ? prep_new_page+0x792/0x9b0 [ 1106.195090][T25154] ? get_page_from_freelist+0x11d3/0x19f0 [ 1106.200911][T25154] kmsan_alloc_page+0xc3/0x360 [ 1106.205669][T25154] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1106.211554][T25154] __alloc_pages_nodemask+0x149d/0x60c0 [ 1106.217111][T25154] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1106.223117][T25154] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1106.229089][T25154] ? kmsan_slab_alloc+0xaa/0x120 [ 1106.234012][T25154] ? __kmalloc_node+0xd7a/0x1380 [ 1106.238960][T25154] ? kvmalloc_node+0x19f/0x3d0 [ 1106.243710][T25154] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1106.249606][T25154] ? default_file_splice_read+0x294/0x1060 [ 1106.255406][T25154] ? splice_direct_to_actor+0x587/0x1130 [ 1106.261024][T25154] ? do_splice_direct+0x342/0x580 [ 1106.266035][T25154] ? do_sendfile+0x1010/0x1d20 [ 1106.270783][T25154] ? __se_sys_sendfile64+0x2bb/0x360 [ 1106.276057][T25154] ? __x64_sys_sendfile64+0x56/0x70 [ 1106.281246][T25154] ? do_syscall_64+0xb6/0x160 [ 1106.285911][T25154] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1106.291968][T25154] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1106.297607][T25154] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1106.303751][T25154] ? stack_trace_save+0x11c/0x1b0 [ 1106.308775][T25154] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1106.314662][T25154] alloc_pages_current+0x68d/0x9a0 [ 1106.319770][T25154] push_pipe+0x660/0xbd0 [ 1106.324007][T25154] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1106.329642][T25154] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1106.335383][T25154] default_file_splice_read+0x294/0x1060 [ 1106.341037][T25154] ? security_file_permission+0x51f/0x6e0 [ 1106.346755][T25154] ? rw_verify_area+0x3a5/0x5e0 [ 1106.351600][T25154] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1106.357486][T25154] ? __ia32_sys_tee+0x160/0x160 [ 1106.362329][T25154] splice_direct_to_actor+0x587/0x1130 [ 1106.367777][T25154] ? do_splice_direct+0x580/0x580 [ 1106.372811][T25154] do_splice_direct+0x342/0x580 [ 1106.377752][T25154] do_sendfile+0x1010/0x1d20 [ 1106.382362][T25154] __se_sys_sendfile64+0x2bb/0x360 [ 1106.387465][T25154] ? syscall_return_slowpath+0x90/0x610 [ 1106.393005][T25154] __x64_sys_sendfile64+0x56/0x70 [ 1106.398021][T25154] do_syscall_64+0xb6/0x160 [ 1106.402516][T25154] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1106.408408][T25154] RIP: 0033:0x459f39 [ 1106.412292][T25154] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.431898][T25154] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1106.440305][T25154] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1106.448264][T25154] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1106.456230][T25154] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1106.464190][T25154] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1106.472150][T25154] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1106.500201][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1106.528705][T25157] FAULT_INJECTION: forcing a failure. [ 1106.528705][T25157] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.542346][T25157] CPU: 0 PID: 25157 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1106.550301][T25157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.560408][T25157] Call Trace: [ 1106.563773][T25157] dump_stack+0x191/0x1f0 [ 1106.568214][T25157] should_fail+0xa3f/0xa50 [ 1106.572723][T25157] __should_failslab+0x264/0x280 [ 1106.577739][T25157] should_failslab+0x29/0x70 [ 1106.582388][T25157] __kmalloc+0xae/0x430 [ 1106.586602][T25157] ? apic_timer_interrupt+0xa/0x40 [ 1106.591771][T25157] ? kzalloc+0x53/0xb0 [ 1106.595893][T25157] kzalloc+0x53/0xb0 [ 1106.599855][T25157] __register_sysctl_table+0x15f1/0x2880 [ 1106.605566][T25157] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1106.611690][T25157] ? __kmalloc_track_caller+0x226/0xea0 [ 1106.617279][T25157] ? proc_register+0x66f/0x8c0 [ 1106.622078][T25157] ? kmsan_get_metadata+0x39/0x350 [ 1106.627237][T25157] register_net_sysctl+0x9f/0xb0 [ 1106.632211][T25157] nf_log_net_init+0x661/0xad0 [ 1106.637006][T25157] ? local_bh_enable+0x40/0x40 [ 1106.641843][T25157] ops_init+0x2d3/0x730 [ 1106.646041][T25157] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1106.651963][T25157] setup_net+0x28e/0x12a0 [ 1106.656324][T25157] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1106.662507][T25157] ? down_read_killable+0x12e/0x300 [ 1106.667735][T25157] copy_net_ns+0x73e/0x970 [ 1106.672218][T25157] create_new_namespaces+0x8d8/0xda0 [ 1106.677548][T25157] unshare_nsproxy_namespaces+0x25e/0x340 [ 1106.683298][T25157] ksys_unshare+0x883/0x1110 [ 1106.687927][T25157] __se_sys_unshare+0x41/0x60 [ 1106.692640][T25157] __x64_sys_unshare+0x32/0x50 [ 1106.697427][T25157] do_syscall_64+0xb6/0x160 [ 1106.701959][T25157] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1106.707883][T25157] RIP: 0033:0x459f39 [ 1106.711808][T25157] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.731441][T25157] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1106.739882][T25157] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1106.747872][T25157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1106.755888][T25157] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1106.763891][T25157] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1106.771884][T25157] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1106.784412][T25157] sysctl could not get directory: //net -12 [ 1106.790724][T25157] CPU: 0 PID: 25157 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1106.798646][T25157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.808741][T25157] Call Trace: [ 1106.812066][T25157] dump_stack+0x191/0x1f0 [ 1106.816430][T25157] __register_sysctl_table+0x2702/0x2880 [ 1106.822098][T25157] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1106.828187][T25157] ? __kmalloc_track_caller+0x226/0xea0 [ 1106.833761][T25157] ? proc_register+0x66f/0x8c0 [ 1106.838556][T25157] ? kmsan_get_metadata+0x39/0x350 [ 1106.843716][T25157] register_net_sysctl+0x9f/0xb0 [ 1106.848689][T25157] nf_log_net_init+0x661/0xad0 [ 1106.853485][T25157] ? local_bh_enable+0x40/0x40 [ 1106.858273][T25157] ops_init+0x2d3/0x730 [ 1106.862479][T25157] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1106.868410][T25157] setup_net+0x28e/0x12a0 [ 1106.872772][T25157] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1106.878963][T25157] ? down_read_killable+0x12e/0x300 [ 1106.884296][T25157] copy_net_ns+0x73e/0x970 [ 1106.888752][T25157] create_new_namespaces+0x8d8/0xda0 [ 1106.894082][T25157] unshare_nsproxy_namespaces+0x25e/0x340 [ 1106.899834][T25157] ksys_unshare+0x883/0x1110 [ 1106.904460][T25157] __se_sys_unshare+0x41/0x60 [ 1106.909154][T25157] __x64_sys_unshare+0x32/0x50 [ 1106.913941][T25157] do_syscall_64+0xb6/0x160 [ 1106.918467][T25157] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1106.924374][T25157] RIP: 0033:0x459f39 [ 1106.928295][T25157] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.947918][T25157] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1106.956356][T25157] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1106.964345][T25157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1106.972344][T25157] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:05:41 executing program 1 (fault-call:2 fault-nth:14): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x1b2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x1000000c1) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 1106.980329][T25157] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1106.988315][T25157] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:05:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "0c061beb551e986367bc99"}, 0xc, 0x0) [ 1107.098271][T25171] FAULT_INJECTION: forcing a failure. [ 1107.098271][T25171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1107.111551][T25171] CPU: 0 PID: 25171 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1107.119441][T25171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.129498][T25171] Call Trace: [ 1107.132787][T25171] dump_stack+0x191/0x1f0 [ 1107.137117][T25171] should_fail+0xa3f/0xa50 [ 1107.141539][T25171] should_fail_alloc_page+0x1fb/0x270 [ 1107.146906][T25171] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1107.152370][T25171] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1107.158272][T25171] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1107.164247][T25171] ? prep_new_page+0x792/0x9b0 [ 1107.169013][T25171] ? get_page_from_freelist+0x11d3/0x19f0 [ 1107.174742][T25171] kmsan_alloc_page+0x131/0x360 [ 1107.179587][T25171] __alloc_pages_nodemask+0x149d/0x60c0 [ 1107.185128][T25171] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1107.191100][T25171] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1107.197071][T25171] ? kmsan_slab_alloc+0xaa/0x120 [ 1107.202024][T25171] ? __kmalloc_node+0xd7a/0x1380 [ 1107.206983][T25171] ? kvmalloc_node+0x19f/0x3d0 [ 1107.211840][T25171] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1107.217826][T25171] ? default_file_splice_read+0x294/0x1060 [ 1107.223619][T25171] ? splice_direct_to_actor+0x587/0x1130 [ 1107.229238][T25171] ? do_splice_direct+0x342/0x580 [ 1107.234249][T25171] ? do_sendfile+0x1010/0x1d20 [ 1107.239085][T25171] ? __se_sys_sendfile64+0x2bb/0x360 [ 1107.244360][T25171] ? __x64_sys_sendfile64+0x56/0x70 [ 1107.249545][T25171] ? do_syscall_64+0xb6/0x160 [ 1107.254212][T25171] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1107.260279][T25171] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1107.265933][T25171] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1107.272079][T25171] ? stack_trace_save+0x11c/0x1b0 [ 1107.277108][T25171] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1107.283083][T25171] alloc_pages_current+0x68d/0x9a0 [ 1107.288195][T25171] push_pipe+0x660/0xbd0 [ 1107.292432][T25171] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1107.298084][T25171] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1107.303850][T25171] default_file_splice_read+0x294/0x1060 [ 1107.309492][T25171] ? security_file_permission+0x51f/0x6e0 [ 1107.315213][T25171] ? rw_verify_area+0x3a5/0x5e0 [ 1107.320059][T25171] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1107.325965][T25171] ? __ia32_sys_tee+0x160/0x160 [ 1107.330810][T25171] splice_direct_to_actor+0x587/0x1130 [ 1107.336258][T25171] ? do_splice_direct+0x580/0x580 [ 1107.341294][T25171] do_splice_direct+0x342/0x580 [ 1107.346246][T25171] do_sendfile+0x1010/0x1d20 [ 1107.350852][T25171] __se_sys_sendfile64+0x2bb/0x360 [ 1107.355965][T25171] ? syscall_return_slowpath+0x90/0x610 [ 1107.361510][T25171] __x64_sys_sendfile64+0x56/0x70 [ 1107.366529][T25171] do_syscall_64+0xb6/0x160 [ 1107.371024][T25171] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1107.376910][T25171] RIP: 0033:0x459f39 00:05:42 executing program 5 (fault-call:15 fault-nth:11): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1107.380802][T25171] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.400393][T25171] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1107.408807][T25171] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1107.416781][T25171] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1107.424747][T25171] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.432703][T25171] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1107.440660][T25171] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:05:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x2000}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1107.462706][T19704] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1107.556729][T25178] FAULT_INJECTION: forcing a failure. [ 1107.556729][T25178] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.571554][T25178] CPU: 1 PID: 25178 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1107.579504][T25178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.589600][T25178] Call Trace: [ 1107.592940][T25178] dump_stack+0x191/0x1f0 [ 1107.597321][T25178] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1107.603600][T25178] should_fail+0xa3f/0xa50 [ 1107.608060][T25178] __should_failslab+0x264/0x280 [ 1107.613034][T25178] should_failslab+0x29/0x70 [ 1107.617652][T25178] __kmalloc+0xae/0x430 [ 1107.621840][T25178] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 1107.627925][T25178] ? kzalloc+0x53/0xb0 [ 1107.632018][T25178] kzalloc+0x53/0xb0 [ 1107.635938][T25178] __register_sysctl_table+0x15f1/0x2880 [ 1107.641602][T25178] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1107.647698][T25178] ? __kmalloc_track_caller+0x226/0xea0 [ 1107.653301][T25178] ? proc_register+0x66f/0x8c0 [ 1107.658112][T25178] ? kmsan_get_metadata+0x39/0x350 [ 1107.663376][T25178] register_net_sysctl+0x9f/0xb0 [ 1107.668360][T25178] nf_log_net_init+0x661/0xad0 [ 1107.673163][T25178] ? local_bh_enable+0x40/0x40 [ 1107.678041][T25178] ops_init+0x2d3/0x730 [ 1107.682328][T25178] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1107.688255][T25178] setup_net+0x28e/0x12a0 [ 1107.692619][T25178] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1107.698802][T25178] ? down_read_killable+0x12e/0x300 [ 1107.704034][T25178] copy_net_ns+0x73e/0x970 [ 1107.708493][T25178] create_new_namespaces+0x8d8/0xda0 [ 1107.713837][T25178] unshare_nsproxy_namespaces+0x25e/0x340 [ 1107.719585][T25178] ksys_unshare+0x883/0x1110 [ 1107.724215][T25178] __se_sys_unshare+0x41/0x60 [ 1107.728914][T25178] __x64_sys_unshare+0x32/0x50 [ 1107.733717][T25178] do_syscall_64+0xb6/0x160 [ 1107.738246][T25178] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1107.744164][T25178] RIP: 0033:0x459f39 [ 1107.748085][T25178] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.767715][T25178] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1107.776156][T25178] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1107.784142][T25178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1107.792127][T25178] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.800114][T25178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1107.808105][T25178] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1107.816638][T25178] sysctl could not get directory: /net//netfilter -12 [ 1107.818382][T25180] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1107.824000][T25178] CPU: 1 PID: 25178 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1107.839853][T25178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.847135][T25181] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1107.849947][T25178] Call Trace: [ 1107.849999][T25178] dump_stack+0x191/0x1f0 [ 1107.850060][T25178] __register_sysctl_table+0x2702/0x2880 [ 1107.871489][T25178] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1107.877616][T25178] ? __kmalloc_track_caller+0x226/0xea0 [ 1107.883221][T25178] ? proc_register+0x66f/0x8c0 [ 1107.888034][T25178] ? kmsan_get_metadata+0x39/0x350 [ 1107.893224][T25178] register_net_sysctl+0x9f/0xb0 [ 1107.898196][T25178] nf_log_net_init+0x661/0xad0 [ 1107.902990][T25178] ? local_bh_enable+0x40/0x40 [ 1107.907781][T25178] ops_init+0x2d3/0x730 [ 1107.912009][T25178] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1107.917943][T25178] setup_net+0x28e/0x12a0 [ 1107.922389][T25178] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1107.928566][T25178] ? down_read_killable+0x12e/0x300 [ 1107.933808][T25178] copy_net_ns+0x73e/0x970 [ 1107.938263][T25178] create_new_namespaces+0x8d8/0xda0 [ 1107.943590][T25178] unshare_nsproxy_namespaces+0x25e/0x340 [ 1107.949340][T25178] ksys_unshare+0x883/0x1110 [ 1107.953966][T25178] __se_sys_unshare+0x41/0x60 [ 1107.958662][T25178] __x64_sys_unshare+0x32/0x50 [ 1107.963447][T25178] do_syscall_64+0xb6/0x160 [ 1107.967990][T25178] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1107.973896][T25178] RIP: 0033:0x459f39 [ 1107.977813][T25178] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.997432][T25178] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 00:05:43 executing program 1 (fault-call:2 fault-nth:15): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1108.005871][T25178] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1108.013857][T25178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1108.021868][T25178] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.031415][T25178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1108.039403][T25178] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1108.086192][T25184] FAULT_INJECTION: forcing a failure. [ 1108.086192][T25184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1108.099961][T19704] usb 3-1: Using ep0 maxpacket: 8 [ 1108.106879][T25184] CPU: 1 PID: 25184 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1108.114818][T25184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.124889][T25184] Call Trace: [ 1108.128229][T25184] dump_stack+0x191/0x1f0 [ 1108.132598][T25184] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1108.138527][T25184] should_fail+0xa3f/0xa50 [ 1108.143007][T25184] should_fail_alloc_page+0x1fb/0x270 [ 1108.148412][T25184] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1108.153922][T25184] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1108.159930][T25184] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1108.165956][T25184] ? kmsan_slab_alloc+0xaa/0x120 [ 1108.170915][T25184] ? __kmalloc_node+0xd7a/0x1380 [ 1108.175876][T25184] ? kvmalloc_node+0x19f/0x3d0 [ 1108.180664][T25184] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1108.186687][T25184] ? default_file_splice_read+0x294/0x1060 [ 1108.192519][T25184] ? splice_direct_to_actor+0x587/0x1130 [ 1108.198170][T25184] ? do_splice_direct+0x342/0x580 [ 1108.203236][T25184] ? do_sendfile+0x1010/0x1d20 [ 1108.208110][T25184] ? __se_sys_sendfile64+0x2bb/0x360 [ 1108.213433][T25184] ? __x64_sys_sendfile64+0x56/0x70 [ 1108.218651][T25184] ? do_syscall_64+0xb6/0x160 [ 1108.223355][T25184] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1108.229453][T25184] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1108.235154][T25184] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1108.241337][T25184] ? stack_trace_save+0x11c/0x1b0 [ 1108.246422][T25184] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1108.252348][T25184] alloc_pages_current+0x68d/0x9a0 [ 1108.257492][T25184] push_pipe+0x660/0xbd0 [ 1108.261766][T25184] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1108.267436][T25184] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1108.273209][T25184] default_file_splice_read+0x294/0x1060 [ 1108.278893][T25184] ? security_file_permission+0x51f/0x6e0 [ 1108.284658][T25184] ? rw_verify_area+0x3a5/0x5e0 [ 1108.289547][T25184] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1108.295483][T25184] ? __ia32_sys_tee+0x160/0x160 [ 1108.300379][T25184] splice_direct_to_actor+0x587/0x1130 [ 1108.305878][T25184] ? do_splice_direct+0x580/0x580 [ 1108.310957][T25184] do_splice_direct+0x342/0x580 [ 1108.315869][T25184] do_sendfile+0x1010/0x1d20 [ 1108.320527][T25184] __se_sys_sendfile64+0x2bb/0x360 [ 1108.325681][T25184] ? syscall_return_slowpath+0x90/0x610 [ 1108.331272][T25184] __x64_sys_sendfile64+0x56/0x70 [ 1108.336331][T25184] do_syscall_64+0xb6/0x160 [ 1108.340880][T25184] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1108.346801][T25184] RIP: 0033:0x459f39 [ 1108.350724][T25184] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.370360][T25184] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1108.378898][T25184] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1108.386894][T25184] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1108.394896][T25184] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.402888][T25184] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1108.410877][T25184] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1108.492284][T19704] usb 3-1: New USB device found, idVendor=078c, idProduct=1000, bcdDevice=c8.5b [ 1108.501461][T19704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.513394][T19704] usb 3-1: config 0 descriptor?? [ 1108.555944][T19704] gtco 3-1:0.0: Can't retrieve exta USB descriptor to get hid report descriptor length [ 1108.566417][T19704] gtco: probe of 3-1:0.0 failed with error -5 [ 1108.755090][T19704] usb 3-1: USB disconnect, device number 28 [ 1109.521905][T19704] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1109.761847][T19704] usb 3-1: Using ep0 maxpacket: 8 [ 1109.882149][T19704] usb 3-1: New USB device found, idVendor=078c, idProduct=1000, bcdDevice=c8.5b [ 1109.891281][T19704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.901140][T19704] usb 3-1: config 0 descriptor?? [ 1109.945576][T19704] gtco 3-1:0.0: Can't retrieve exta USB descriptor to get hid report descriptor length [ 1109.955982][T19704] gtco: probe of 3-1:0.0 failed with error -5 [ 1110.144321][T19704] usb 3-1: USB disconnect, device number 29 00:05:45 executing program 3: syz_usb_connect(0x0, 0xffffffffffffff8e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x11, 0x99, 0x66, 0xff, 0x19d2, 0xfff9, 0x452c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2fc, 0x1, 0x8, 0x3, 0x2487b71cf5814530, 0xff, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ncm={{0x0, 0x24, 0x6, 0x0, 0x1, "53234c38ca7d"}, {0x0, 0x24, 0x0, 0x4}, {0x0, 0x24, 0xf, 0x1, 0x4, 0x7, 0x6, 0xb2}, {0x0, 0x24, 0x1a, 0x8, 0x8}, [@mbim_extended={0x0, 0x24, 0x1c, 0x8, 0x0, 0x2}, @acm={0x0, 0x24, 0x2, 0x9}, @mbim={0x0, 0x24, 0x1b, 0x1ff, 0x81, 0x81, 0x7, 0x4, 0x4}, @acm={0x0, 0x24, 0x2, 0xc}, @acm={0x0, 0x24, 0x2, 0x4}]}, @uac_as={[@format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0xff, 0x1, 0x8, 0x5, "3504a3", "f72596"}, @format_type_ii_discrete={0x0, 0x24, 0x2, 0x2, 0x7, 0xfff9, 0x9, "ee4b8f"}, @as_header={0x0, 0x24, 0x1, 0x9, 0x1f, 0x1002}, @format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x66, 0x4, 0x0, 0x8, "097aa7", "b9"}]}]}}]}}]}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x349a01, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x12, 0x10, "4f10626122ad4fbf9c7ff8ad897ae065bb77bfa4df4f1efc4bf2742cf853d0e54ad5c8b883d70c94cf02eba1f69d2f0d3c1edb17be4aa9991fe2c5d5454040b0", "9d94c81287fae151d0c383b1a7ee70fe1f01636730fef8c4a6f9d3778d2aa3d1", [0xcf0d, 0x1]}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000003c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x2, 0x1, 0x3000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r4, 0x31, "97367192d362acf8337f92baa5d83b015ddb2a1aeb6943f1bc72b00214ee75fe666799a9427e2fd4c2f518b677a27ba1cd"}, &(0x7f0000000280)=0x39) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="94000000260648be99c55fa077cf9ea01c0db3bd1ed62fa730afc05066032da3ab61d4529de6d7dfa6273fbf88f5f84228bf1e36fa9e90221b26156864b433bbe3915e23fd9af6e1fc11390b22a5dd76e88427cc1a31b576a88f664ef33360a4c1bfbadb26e2449007ef06de3abbc3d62c0729a240dcf4c31d5485a9e87ce72f26caa78257e6ebf774c507ef0a25dfd3a153d7f805cf0bde"], &(0x7f0000000380)=0x9c) 00:05:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:45 executing program 1 (fault-call:2 fault-nth:16): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:45 executing program 5 (fault-call:15 fault-nth:12): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:45 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x0, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x164801, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0xc0045878, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000004c0)={r8, 0x7ff, 0x81, 0x5, 0x8, 0xdc, 0x2, 0x1, {r10, @in6={{0xa, 0x4e22, 0x401, @remote, 0x2}}, 0x5, 0x7, 0x1f, 0x1, 0x5d38}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000005c0)={r11, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) r12 = socket(0x10, 0x803, 0x0) r13 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r13, 0xc0045878, 0x0) setsockopt$packet_tx_ring(r13, 0x107, 0xd, &(0x7f0000000340)=@req3={0x10000000, 0x200, 0xffffffff, 0x9, 0x5, 0x3f, 0x8000}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0xfffffffffffffd80, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r15 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x900c3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r15, 0x8936, &(0x7f0000000280)={@loopback, 0x59, r14}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f889000000004600006df08447ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75c57aaa5a1d00868bb31bc48e21c11454c8b7063434", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r14}) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001000050700"/20, @ANYRES32=r14, @ANYBLOB="16938cde6c78b73d3cedac85c6ded276a3c8ab4e77735b5970e420c2b5dc288c4ad2225c4bbe368de02f911a0d059d23bd1e924f38b2599719642bf54497fd72db5baee50cd19e7657802a14ec032ee523b0838f37afdc3d2fbfd12f71511077e3aad307b1f445b7a4b300efef173204e3512ba385f0169f366c8747fd22144f9d2b674d07cca9599ed07134bbbb59d1586bcd41b2c5749719"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) [ 1110.743816][T25200] FAULT_INJECTION: forcing a failure. [ 1110.743816][T25200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.757079][T25200] CPU: 0 PID: 25200 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1110.757089][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.757095][T25200] Call Trace: [ 1110.757121][T25200] dump_stack+0x191/0x1f0 [ 1110.757150][T25200] should_fail+0xa3f/0xa50 [ 1110.757185][T25200] should_fail_alloc_page+0x1fb/0x270 [ 1110.757211][T25200] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1110.757238][T25200] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1110.757265][T25200] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1110.757286][T25200] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1110.757301][T25200] ? prep_new_page+0x792/0x9b0 [ 1110.757344][T25200] ? get_page_from_freelist+0x11d3/0x19f0 [ 1110.775312][T25200] kmsan_alloc_page+0xc3/0x360 [ 1110.782890][T25200] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1110.782936][T25200] __alloc_pages_nodemask+0x149d/0x60c0 [ 1110.792701][T25200] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1110.815995][T25201] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1110.816151][T25200] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1110.863020][T25200] ? kmsan_slab_alloc+0xaa/0x120 [ 1110.867969][T25200] ? __kmalloc_node+0xd7a/0x1380 [ 1110.872917][T25200] ? kvmalloc_node+0x19f/0x3d0 [ 1110.877687][T25200] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1110.883583][T25200] ? default_file_splice_read+0x294/0x1060 [ 1110.889380][T25200] ? splice_direct_to_actor+0x587/0x1130 [ 1110.894999][T25200] ? do_splice_direct+0x342/0x580 [ 1110.900012][T25200] ? do_sendfile+0x1010/0x1d20 [ 1110.904786][T25200] ? __se_sys_sendfile64+0x2bb/0x360 [ 1110.910058][T25200] ? __x64_sys_sendfile64+0x56/0x70 [ 1110.915245][T25200] ? do_syscall_64+0xb6/0x160 [ 1110.919911][T25200] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1110.925970][T25200] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1110.931622][T25200] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1110.937786][T25200] ? stack_trace_save+0x11c/0x1b0 [ 1110.942826][T25200] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1110.948750][T25200] alloc_pages_current+0x68d/0x9a0 [ 1110.953869][T25200] push_pipe+0x660/0xbd0 [ 1110.958106][T25200] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1110.963743][T25200] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1110.969473][T25200] default_file_splice_read+0x294/0x1060 [ 1110.975116][T25200] ? security_file_permission+0x51f/0x6e0 [ 1110.980832][T25200] ? rw_verify_area+0x3a5/0x5e0 [ 1110.985678][T25200] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1110.991562][T25200] ? __ia32_sys_tee+0x160/0x160 [ 1110.996403][T25200] splice_direct_to_actor+0x587/0x1130 [ 1111.001849][T25200] ? do_splice_direct+0x580/0x580 [ 1111.006882][T25200] do_splice_direct+0x342/0x580 [ 1111.011740][T25200] do_sendfile+0x1010/0x1d20 [ 1111.016340][T25200] __se_sys_sendfile64+0x2bb/0x360 [ 1111.021788][T25200] ? syscall_return_slowpath+0x90/0x610 [ 1111.027327][T25200] __x64_sys_sendfile64+0x56/0x70 [ 1111.032368][T25200] do_syscall_64+0xb6/0x160 [ 1111.036875][T25200] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1111.042752][T25200] RIP: 0033:0x459f39 [ 1111.046650][T25200] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.066240][T25200] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1111.074637][T25200] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1111.082595][T25200] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 00:05:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000440)={0x0, 0x2, 0x3}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x41387132aa4c6757}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x5) fcntl$getownex(r3, 0x10, &(0x7f0000000400)) 00:05:46 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) [ 1111.090551][T25200] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1111.098507][T25200] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1111.106462][T25200] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1111.156096][T25195] FAULT_INJECTION: forcing a failure. [ 1111.156096][T25195] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.169343][T25195] CPU: 1 PID: 25195 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1111.177278][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.187400][T25195] Call Trace: [ 1111.190755][T25195] dump_stack+0x191/0x1f0 [ 1111.195144][T25195] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1111.201159][T25195] should_fail+0xa3f/0xa50 [ 1111.205621][T25195] __should_failslab+0x264/0x280 [ 1111.210605][T25195] should_failslab+0x29/0x70 [ 1111.215221][T25195] __kmalloc+0xae/0x430 [ 1111.219403][T25195] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 1111.225486][T25195] ? kzalloc+0x53/0xb0 [ 1111.229579][T25195] kzalloc+0x53/0xb0 [ 1111.233501][T25195] __register_sysctl_table+0x15f1/0x2880 [ 1111.239174][T25195] ? kmsan_memcpy_memmove_metadata+0x2a6/0x2e0 [ 1111.245376][T25195] register_net_sysctl+0x9f/0xb0 [ 1111.250344][T25195] nf_log_net_init+0x661/0xad0 [ 1111.255141][T25195] ? local_bh_enable+0x40/0x40 [ 1111.259926][T25195] ops_init+0x2d3/0x730 [ 1111.264121][T25195] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1111.270042][T25195] setup_net+0x28e/0x12a0 [ 1111.274414][T25195] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1111.280610][T25195] ? down_read_killable+0x12e/0x300 [ 1111.285859][T25195] copy_net_ns+0x73e/0x970 [ 1111.290314][T25195] create_new_namespaces+0x8d8/0xda0 [ 1111.295652][T25195] unshare_nsproxy_namespaces+0x25e/0x340 [ 1111.301415][T25195] ksys_unshare+0x883/0x1110 [ 1111.306066][T25195] __se_sys_unshare+0x41/0x60 [ 1111.310765][T25195] __x64_sys_unshare+0x32/0x50 [ 1111.315569][T25195] do_syscall_64+0xb6/0x160 [ 1111.320100][T25195] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1111.326007][T25195] RIP: 0033:0x459f39 [ 1111.329926][T25195] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:05:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000001fe8)={0x800004, 0x0, 0xfffffffc, 0x0, 0x200, 0xfffffffc}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') [ 1111.349545][T25195] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1111.357980][T25195] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1111.365967][T25195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1111.373962][T25195] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1111.382233][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1111.390221][T25195] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1111.400417][T25195] sysctl could not get directory: /net/netfilter//nf_log -12 [ 1111.407945][T25204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1111.408215][T25195] CPU: 1 PID: 25195 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1111.425801][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.438426][T25195] Call Trace: [ 1111.441760][T25195] dump_stack+0x191/0x1f0 [ 1111.446138][T25195] __register_sysctl_table+0x2702/0x2880 [ 1111.451898][T25195] ? kmsan_memcpy_memmove_metadata+0x2a6/0x2e0 [ 1111.458097][T25195] register_net_sysctl+0x9f/0xb0 [ 1111.463343][T25195] nf_log_net_init+0x661/0xad0 [ 1111.468141][T25195] ? local_bh_enable+0x40/0x40 [ 1111.472933][T25195] ops_init+0x2d3/0x730 [ 1111.477131][T25195] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1111.483067][T25195] setup_net+0x28e/0x12a0 [ 1111.487453][T25195] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1111.493655][T25195] ? down_read_killable+0x12e/0x300 [ 1111.498886][T25195] copy_net_ns+0x73e/0x970 [ 1111.503352][T25195] create_new_namespaces+0x8d8/0xda0 [ 1111.508685][T25195] unshare_nsproxy_namespaces+0x25e/0x340 [ 1111.514451][T25195] ksys_unshare+0x883/0x1110 [ 1111.519080][T25195] __se_sys_unshare+0x41/0x60 [ 1111.523779][T25195] __x64_sys_unshare+0x32/0x50 [ 1111.528564][T25195] do_syscall_64+0xb6/0x160 [ 1111.535102][T25195] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1111.541012][T25195] RIP: 0033:0x459f39 [ 1111.544966][T25195] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.564588][T25195] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1111.573029][T25195] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1111.581031][T25195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1111.589032][T25195] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1111.597023][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1111.605012][T25195] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:05:46 executing program 1 (fault-call:2 fault-nth:17): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1111.654236][T25212] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1111.681531][T25214] FAULT_INJECTION: forcing a failure. [ 1111.681531][T25214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1111.694764][T25214] CPU: 1 PID: 25214 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 00:05:46 executing program 5 (fault-call:15 fault-nth:13): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1111.702649][T25214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.712705][T25214] Call Trace: [ 1111.715995][T25214] dump_stack+0x191/0x1f0 [ 1111.720340][T25214] should_fail+0xa3f/0xa50 [ 1111.724792][T25214] should_fail_alloc_page+0x1fb/0x270 [ 1111.730177][T25214] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1111.735633][T25214] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1111.741523][T25214] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1111.747494][T25214] ? prep_new_page+0x792/0x9b0 [ 1111.752274][T25214] ? get_page_from_freelist+0x11d3/0x19f0 [ 1111.757997][T25214] kmsan_alloc_page+0x131/0x360 [ 1111.762845][T25214] __alloc_pages_nodemask+0x149d/0x60c0 [ 1111.768382][T25214] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1111.774351][T25214] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1111.780317][T25214] ? kmsan_slab_alloc+0xaa/0x120 [ 1111.785268][T25214] ? __kmalloc_node+0xd7a/0x1380 [ 1111.790196][T25214] ? kvmalloc_node+0x19f/0x3d0 [ 1111.794952][T25214] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1111.800837][T25214] ? default_file_splice_read+0x294/0x1060 [ 1111.806632][T25214] ? splice_direct_to_actor+0x587/0x1130 [ 1111.812257][T25214] ? do_splice_direct+0x342/0x580 [ 1111.817283][T25214] ? do_sendfile+0x1010/0x1d20 [ 1111.822037][T25214] ? __se_sys_sendfile64+0x2bb/0x360 [ 1111.827315][T25214] ? __x64_sys_sendfile64+0x56/0x70 [ 1111.832511][T25214] ? do_syscall_64+0xb6/0x160 [ 1111.837180][T25214] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1111.843241][T25214] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1111.848881][T25214] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1111.855029][T25214] ? stack_trace_save+0x11c/0x1b0 [ 1111.860057][T25214] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1111.865948][T25214] alloc_pages_current+0x68d/0x9a0 [ 1111.871058][T25214] push_pipe+0x660/0xbd0 [ 1111.875295][T25214] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1111.880927][T25214] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1111.886658][T25214] default_file_splice_read+0x294/0x1060 [ 1111.892298][T25214] ? security_file_permission+0x51f/0x6e0 [ 1111.898012][T25214] ? rw_verify_area+0x3a5/0x5e0 [ 1111.902871][T25214] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1111.908755][T25214] ? __ia32_sys_tee+0x160/0x160 [ 1111.913598][T25214] splice_direct_to_actor+0x587/0x1130 [ 1111.919044][T25214] ? do_splice_direct+0x580/0x580 [ 1111.924080][T25214] do_splice_direct+0x342/0x580 [ 1111.928940][T25214] do_sendfile+0x1010/0x1d20 [ 1111.933544][T25214] __se_sys_sendfile64+0x2bb/0x360 [ 1111.938644][T25214] ? syscall_return_slowpath+0x90/0x610 [ 1111.944186][T25214] __x64_sys_sendfile64+0x56/0x70 [ 1111.949199][T25214] do_syscall_64+0xb6/0x160 [ 1111.953697][T25214] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1111.959578][T25214] RIP: 0033:0x459f39 [ 1111.963465][T25214] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.983058][T25214] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1111.991472][T25214] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1111.999500][T25214] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1112.007459][T25214] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1112.015418][T25214] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1112.023377][T25214] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1112.043754][T24899] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1112.049304][T25217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1112.084964][T25218] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 00:05:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0xa4, &(0x7f0000000380)={0x0, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x3) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 00:05:47 executing program 1 (fault-call:2 fault-nth:18): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1112.197556][T25225] FAULT_INJECTION: forcing a failure. [ 1112.197556][T25225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1112.211071][T25225] CPU: 1 PID: 25225 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1112.218510][T25221] FAULT_INJECTION: forcing a failure. [ 1112.218510][T25221] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.219007][T25225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.219023][T25225] Call Trace: [ 1112.219109][T25225] dump_stack+0x191/0x1f0 [ 1112.249392][T25225] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1112.255348][T25225] should_fail+0xa3f/0xa50 [ 1112.259837][T25225] should_fail_alloc_page+0x1fb/0x270 [ 1112.265266][T25225] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1112.270776][T25225] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1112.276803][T25225] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1112.282834][T25225] ? kmsan_slab_alloc+0xaa/0x120 [ 1112.287812][T25225] ? __kmalloc_node+0xd7a/0x1380 [ 1112.292790][T25225] ? kvmalloc_node+0x19f/0x3d0 [ 1112.297600][T25225] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1112.303543][T25225] ? default_file_splice_read+0x294/0x1060 [ 1112.309396][T25225] ? splice_direct_to_actor+0x587/0x1130 [ 1112.315073][T25225] ? do_splice_direct+0x342/0x580 [ 1112.320141][T25225] ? do_sendfile+0x1010/0x1d20 [ 1112.324945][T25225] ? __se_sys_sendfile64+0x2bb/0x360 [ 1112.330267][T25225] ? __x64_sys_sendfile64+0x56/0x70 [ 1112.335507][T25225] ? do_syscall_64+0xb6/0x160 [ 1112.340228][T25225] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1112.346364][T25225] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1112.352072][T25225] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1112.358284][T25225] ? stack_trace_save+0x11c/0x1b0 [ 1112.363383][T25225] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1112.369337][T25225] alloc_pages_current+0x68d/0x9a0 [ 1112.374508][T25225] push_pipe+0x660/0xbd0 [ 1112.378797][T25225] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1112.384581][T25225] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1112.390382][T25225] default_file_splice_read+0x294/0x1060 [ 1112.396097][T25225] ? security_file_permission+0x51f/0x6e0 [ 1112.401870][T25225] ? rw_verify_area+0x3a5/0x5e0 [ 1112.406778][T25225] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1112.412718][T25225] ? __ia32_sys_tee+0x160/0x160 [ 1112.417647][T25225] splice_direct_to_actor+0x587/0x1130 [ 1112.423156][T25225] ? do_splice_direct+0x580/0x580 [ 1112.428267][T25225] do_splice_direct+0x342/0x580 [ 1112.433195][T25225] do_sendfile+0x1010/0x1d20 [ 1112.437885][T25225] __se_sys_sendfile64+0x2bb/0x360 [ 1112.443049][T25225] ? syscall_return_slowpath+0x90/0x610 [ 1112.448658][T25225] __x64_sys_sendfile64+0x56/0x70 [ 1112.453731][T25225] do_syscall_64+0xb6/0x160 [ 1112.458286][T25225] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1112.464212][T25225] RIP: 0033:0x459f39 [ 1112.468153][T25225] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1112.487795][T25225] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1112.496252][T25225] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1112.504259][T25225] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1112.512264][T25225] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1112.520271][T25225] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1112.528272][T25225] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1112.536326][T25221] CPU: 0 PID: 25221 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1112.544255][T25221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.554362][T25221] Call Trace: [ 1112.557688][T25221] dump_stack+0x191/0x1f0 [ 1112.562052][T25221] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1112.567980][T25221] should_fail+0xa3f/0xa50 [ 1112.572439][T25221] __should_failslab+0x264/0x280 [ 1112.577409][T25221] should_failslab+0x29/0x70 [ 1112.582046][T25221] kmem_cache_alloc+0xd6/0xd10 [ 1112.586852][T25221] ? __proc_create+0xa13/0x14f0 [ 1112.591764][T25221] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1112.597700][T25221] __proc_create+0xa13/0x14f0 [ 1112.602428][T25221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1112.608546][T25221] proc_create_reg+0x195/0x2a0 [ 1112.613346][T25221] proc_create_net_data+0x12f/0x330 [ 1112.618582][T25221] netlink_net_init+0xa2/0x110 [ 1112.623371][T25221] ? netlink_create+0xbf0/0xbf0 [ 1112.628246][T25221] ops_init+0x2d3/0x730 [ 1112.632451][T25221] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1112.638381][T25221] setup_net+0x28e/0x12a0 [ 1112.642743][T25221] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1112.648927][T25221] ? down_read_killable+0x12e/0x300 [ 1112.654155][T25221] copy_net_ns+0x73e/0x970 [ 1112.658624][T25221] create_new_namespaces+0x8d8/0xda0 [ 1112.663953][T25221] unshare_nsproxy_namespaces+0x25e/0x340 [ 1112.669700][T25221] ksys_unshare+0x883/0x1110 [ 1112.674325][T25221] __se_sys_unshare+0x41/0x60 [ 1112.679044][T25221] __x64_sys_unshare+0x32/0x50 [ 1112.683920][T25221] do_syscall_64+0xb6/0x160 [ 1112.688448][T25221] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1112.694353][T25221] RIP: 0033:0x459f39 [ 1112.698277][T25221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1112.717898][T25221] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1112.726345][T25221] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1112.734331][T25221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1112.742316][T25221] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1112.750300][T25221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1112.758302][T25221] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1112.802086][T24899] usb 4-1: Invalid ep0 maxpacket: 512 [ 1112.922043][T19704] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1112.951889][T24899] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1113.222140][T24899] usb 4-1: device descriptor read/64, error 18 [ 1113.282192][T19704] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1113.291470][T19704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.301080][T19704] usb 3-1: config 0 descriptor?? [ 1113.346545][T19704] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1113.631888][T24899] usb 4-1: device descriptor read/64, error 18 [ 1113.752094][T24899] usb usb4-port1: attempt power cycle 00:05:48 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x6}}, 0xfffffffffffffe56) unshare(0x2000400) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 00:05:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x4, 0x800, 0x6, &(0x7f0000000040)) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:05:48 executing program 1 (fault-call:2 fault-nth:19): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:48 executing program 5 (fault-call:15 fault-nth:14): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1113.912233][T25238] FAULT_INJECTION: forcing a failure. [ 1113.912233][T25238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1113.925577][T25238] CPU: 1 PID: 25238 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1113.933474][T25238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.939574][T25236] FAULT_INJECTION: forcing a failure. [ 1113.939574][T25236] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.943550][T25238] Call Trace: [ 1113.943578][T25238] dump_stack+0x191/0x1f0 [ 1113.943610][T25238] should_fail+0xa3f/0xa50 [ 1113.943644][T25238] should_fail_alloc_page+0x1fb/0x270 [ 1113.943669][T25238] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1113.943696][T25238] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1113.943724][T25238] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1113.943748][T25238] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1113.943765][T25238] ? prep_new_page+0x792/0x9b0 [ 1113.943799][T25238] ? get_page_from_freelist+0x11d3/0x19f0 [ 1113.943849][T25238] kmsan_alloc_page+0xc3/0x360 [ 1113.943869][T25238] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1113.943892][T25238] __alloc_pages_nodemask+0x149d/0x60c0 [ 1113.943912][T25238] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1113.943930][T25238] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1113.943946][T25238] ? kmsan_slab_alloc+0xaa/0x120 [ 1113.943960][T25238] ? __kmalloc_node+0xd7a/0x1380 [ 1113.943976][T25238] ? kvmalloc_node+0x19f/0x3d0 [ 1113.943991][T25238] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1113.944009][T25238] ? default_file_splice_read+0x294/0x1060 [ 1113.944025][T25238] ? splice_direct_to_actor+0x587/0x1130 [ 1113.944040][T25238] ? do_splice_direct+0x342/0x580 [ 1113.944055][T25238] ? do_sendfile+0x1010/0x1d20 [ 1113.944070][T25238] ? __se_sys_sendfile64+0x2bb/0x360 [ 1113.944085][T25238] ? __x64_sys_sendfile64+0x56/0x70 [ 1113.944099][T25238] ? do_syscall_64+0xb6/0x160 [ 1113.944115][T25238] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1113.944134][T25238] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1113.944186][T25238] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1114.110521][T25238] ? stack_trace_save+0x11c/0x1b0 [ 1114.115545][T25238] ? apic_timer_interrupt+0xa/0x40 [ 1114.120675][T25238] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1114.126570][T25238] alloc_pages_current+0x68d/0x9a0 [ 1114.131695][T25238] push_pipe+0x660/0xbd0 [ 1114.135939][T25238] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1114.141582][T25238] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1114.147332][T25238] default_file_splice_read+0x294/0x1060 [ 1114.152988][T25238] ? security_file_permission+0x51f/0x6e0 [ 1114.158806][T25238] ? rw_verify_area+0x3a5/0x5e0 [ 1114.163658][T25238] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1114.169550][T25238] ? __ia32_sys_tee+0x160/0x160 [ 1114.174403][T25238] splice_direct_to_actor+0x587/0x1130 [ 1114.179857][T25238] ? do_splice_direct+0x580/0x580 [ 1114.184906][T25238] do_splice_direct+0x342/0x580 [ 1114.189773][T25238] do_sendfile+0x1010/0x1d20 [ 1114.194393][T25238] __se_sys_sendfile64+0x2bb/0x360 [ 1114.199506][T25238] ? syscall_return_slowpath+0x90/0x610 [ 1114.205058][T25238] __x64_sys_sendfile64+0x56/0x70 [ 1114.210163][T25238] do_syscall_64+0xb6/0x160 [ 1114.214670][T25238] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1114.220554][T25238] RIP: 0033:0x459f39 [ 1114.224455][T25238] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1114.244053][T25238] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1114.252462][T25238] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1114.260430][T25238] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1114.268398][T25238] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1114.276365][T25238] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1114.284331][T25238] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1114.292359][T25236] CPU: 0 PID: 25236 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1114.300306][T25236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.310406][T25236] Call Trace: [ 1114.313758][T25236] dump_stack+0x191/0x1f0 [ 1114.318130][T25236] should_fail+0xa3f/0xa50 [ 1114.322618][T25236] __should_failslab+0x264/0x280 [ 1114.327613][T25236] should_failslab+0x29/0x70 [ 1114.332251][T25236] __kmalloc+0xae/0x430 [ 1114.336456][T25236] ? kzalloc+0x53/0xb0 [ 1114.340553][T25236] kzalloc+0x53/0xb0 [ 1114.344478][T25236] ops_init+0xeb/0x730 [ 1114.348590][T25236] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1114.354523][T25236] setup_net+0x28e/0x12a0 [ 1114.358889][T25236] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1114.365076][T25236] ? down_read_killable+0x12e/0x300 [ 1114.370325][T25236] copy_net_ns+0x73e/0x970 [ 1114.374782][T25236] create_new_namespaces+0x8d8/0xda0 [ 1114.380122][T25236] unshare_nsproxy_namespaces+0x25e/0x340 [ 1114.385886][T25236] ksys_unshare+0x883/0x1110 [ 1114.390515][T25236] __se_sys_unshare+0x41/0x60 [ 1114.395222][T25236] __x64_sys_unshare+0x32/0x50 [ 1114.400009][T25236] do_syscall_64+0xb6/0x160 [ 1114.404559][T25236] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1114.410463][T25236] RIP: 0033:0x459f39 [ 1114.414400][T25236] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1114.434555][T25236] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1114.443004][T25236] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1114.450990][T25236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1114.458981][T25236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1114.466969][T25236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1114.474985][T25236] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1114.502180][T19704] gspca_sonixj: reg_w1 err -110 [ 1114.507406][T19704] sonixj: probe of 3-1:0.0 failed with error -110 00:05:49 executing program 1 (fault-call:2 fault-nth:20): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:49 executing program 5 (fault-call:15 fault-nth:15): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1114.621275][T25247] FAULT_INJECTION: forcing a failure. [ 1114.621275][T25247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1114.634541][T25247] CPU: 0 PID: 25247 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1114.642419][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.652461][T25247] Call Trace: [ 1114.655749][T25247] dump_stack+0x191/0x1f0 [ 1114.660080][T25247] should_fail+0xa3f/0xa50 [ 1114.664498][T25247] should_fail_alloc_page+0x1fb/0x270 [ 1114.670560][T25247] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1114.676031][T25247] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1114.681924][T25247] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1114.687898][T25247] ? prep_new_page+0x792/0x9b0 [ 1114.692685][T25247] ? get_page_from_freelist+0x11d3/0x19f0 [ 1114.698426][T25247] kmsan_alloc_page+0x131/0x360 [ 1114.703278][T25247] __alloc_pages_nodemask+0x149d/0x60c0 [ 1114.708816][T25247] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1114.714799][T25247] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1114.720767][T25247] ? kmsan_slab_alloc+0xaa/0x120 [ 1114.725694][T25247] ? __kmalloc_node+0xd7a/0x1380 [ 1114.730619][T25247] ? kvmalloc_node+0x19f/0x3d0 [ 1114.735373][T25247] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1114.741254][T25247] ? default_file_splice_read+0x294/0x1060 [ 1114.747052][T25247] ? splice_direct_to_actor+0x587/0x1130 [ 1114.752671][T25247] ? do_splice_direct+0x342/0x580 [ 1114.757775][T25247] ? do_sendfile+0x1010/0x1d20 [ 1114.762541][T25247] ? __se_sys_sendfile64+0x2bb/0x360 [ 1114.767819][T25247] ? __x64_sys_sendfile64+0x56/0x70 [ 1114.773013][T25247] ? do_syscall_64+0xb6/0x160 [ 1114.777693][T25247] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1114.783761][T25247] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1114.789408][T25247] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1114.795554][T25247] ? stack_trace_save+0x11c/0x1b0 [ 1114.800582][T25247] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1114.806470][T25247] alloc_pages_current+0x68d/0x9a0 [ 1114.811586][T25247] push_pipe+0x660/0xbd0 [ 1114.815839][T25247] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1114.821484][T25247] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1114.827212][T25247] default_file_splice_read+0x294/0x1060 [ 1114.832854][T25247] ? security_file_permission+0x51f/0x6e0 [ 1114.838581][T25247] ? rw_verify_area+0x3a5/0x5e0 [ 1114.843436][T25247] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1114.849320][T25247] ? __ia32_sys_tee+0x160/0x160 [ 1114.854160][T25247] splice_direct_to_actor+0x587/0x1130 [ 1114.859607][T25247] ? do_splice_direct+0x580/0x580 [ 1114.864647][T25247] do_splice_direct+0x342/0x580 [ 1114.869507][T25247] do_sendfile+0x1010/0x1d20 [ 1114.874114][T25247] __se_sys_sendfile64+0x2bb/0x360 [ 1114.879228][T25247] ? syscall_return_slowpath+0x90/0x610 [ 1114.884770][T25247] __x64_sys_sendfile64+0x56/0x70 [ 1114.889799][T25247] do_syscall_64+0xb6/0x160 [ 1114.894295][T25247] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1114.900173][T25247] RIP: 0033:0x459f39 [ 1114.904056][T25247] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1114.923660][T25247] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1114.932060][T25247] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1114.940018][T25247] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1114.947991][T25247] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1114.955949][T25247] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1114.963911][T25247] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1115.047661][T25252] FAULT_INJECTION: forcing a failure. [ 1115.047661][T25252] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.062611][T25252] CPU: 1 PID: 25252 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1115.070549][T25252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.080620][T25252] Call Trace: [ 1115.083956][T25252] dump_stack+0x191/0x1f0 [ 1115.088341][T25252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1115.094269][T25252] should_fail+0xa3f/0xa50 [ 1115.098726][T25252] __should_failslab+0x264/0x280 [ 1115.103694][T25252] should_failslab+0x29/0x70 [ 1115.108306][T25252] kmem_cache_alloc+0xd6/0xd10 [ 1115.113103][T25252] ? sock_alloc_inode+0x58/0x180 [ 1115.118070][T25252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1115.123989][T25252] ? apic_timer_interrupt+0xa/0x40 [ 1115.129136][T25252] sock_alloc_inode+0x58/0x180 [ 1115.133927][T25252] ? sockfs_init_fs_context+0x160/0x160 [ 1115.139600][T25252] new_inode_pseudo+0xb1/0x590 [ 1115.144387][T25252] sock_create_lite+0x168/0x860 [ 1115.149271][T25252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1115.155194][T25252] __netlink_kernel_create+0x1e2/0x1210 [ 1115.160869][T25252] ? kmsan_memcpy_memmove_metadata+0x109/0x2e0 [ 1115.167053][T25252] ? kmsan_memcpy_metadata+0xb/0x10 [ 1115.172292][T25252] rtnetlink_net_init+0xa3/0x170 [ 1115.177252][T25252] ? rtnetlink_net_exit+0x90/0x90 [ 1115.182315][T25252] ? rtnetlink_rcv+0x60/0x60 [ 1115.186932][T25252] ? nlmsg_populate_fdb_fill+0x7f0/0x7f0 [ 1115.192616][T25252] ops_init+0x2d3/0x730 [ 1115.196815][T25252] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1115.202739][T25252] setup_net+0x28e/0x12a0 [ 1115.207120][T25252] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1115.213314][T25252] ? down_read_killable+0x12e/0x300 [ 1115.218545][T25252] copy_net_ns+0x73e/0x970 [ 1115.223000][T25252] create_new_namespaces+0x8d8/0xda0 [ 1115.228327][T25252] unshare_nsproxy_namespaces+0x25e/0x340 [ 1115.234074][T25252] ksys_unshare+0x883/0x1110 [ 1115.238720][T25252] __se_sys_unshare+0x41/0x60 [ 1115.243416][T25252] __x64_sys_unshare+0x32/0x50 [ 1115.248217][T25252] do_syscall_64+0xb6/0x160 [ 1115.252763][T25252] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1115.258670][T25252] RIP: 0033:0x459f39 [ 1115.262594][T25252] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1115.282221][T25252] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1115.290660][T25252] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1115.298647][T25252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1115.306647][T25252] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1115.314634][T25252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1115.322634][T25252] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1115.516563][T24898] usb 3-1: USB disconnect, device number 30 [ 1119.695863][T25258] FAULT_INJECTION: forcing a failure. [ 1119.695863][T25258] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.708691][T25258] CPU: 1 PID: 25258 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 1119.716601][T25258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.726668][T25258] Call Trace: [ 1119.729991][T25258] dump_stack+0x191/0x1f0 [ 1119.734363][T25258] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1119.740307][T25258] should_fail+0xa3f/0xa50 [ 1119.744779][T25258] __should_failslab+0x264/0x280 [ 1119.749793][T25258] should_failslab+0x29/0x70 [ 1119.754416][T25258] kmem_cache_alloc_node+0x103/0xe70 [ 1119.759723][T25258] ? __alloc_skb+0x215/0xa10 [ 1119.764332][T25258] __alloc_skb+0x215/0xa10 [ 1119.768768][T25258] netlink_sendmsg+0x783/0x1330 [ 1119.773637][T25258] ? netlink_getsockopt+0x1430/0x1430 [ 1119.779050][T25258] ___sys_sendmsg+0x14ff/0x1590 [ 1119.783945][T25258] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1119.790071][T25258] ? __fget_light+0x6b1/0x710 [ 1119.794788][T25258] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1119.800447][T25258] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1119.806354][T25258] __se_sys_sendmsg+0x305/0x460 [ 1119.811223][T25258] __x64_sys_sendmsg+0x4a/0x70 [ 1119.815996][T25258] do_syscall_64+0xb6/0x160 [ 1119.820508][T25258] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1119.826399][T25258] RIP: 0033:0x459f39 [ 1119.830325][T25258] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1119.850024][T25258] RSP: 002b:00007f3c197b8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.858442][T25258] RAX: ffffffffffffffda RBX: 00007f3c197b8c90 RCX: 0000000000459f39 [ 1119.866417][T25258] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1119.874487][T25258] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1119.882459][T25258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c197b96d4 00:05:54 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:05:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000200)=""/4096, 0x59854dc5}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 00:05:54 executing program 1 (fault-call:2 fault-nth:21): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11dca5055e0bcf") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x5) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0xffffffff, @rand_addr="c563f57397258fdfc7d00624d3d7809c", 0x8}, {0xa, 0x4e23, 0x8, @rand_addr="1ccd1de202cf7727fed00c11ac45a1d2", 0x9}, 0x6, [0x8001, 0x500, 0x401, 0xfffffffe, 0x2, 0x8a86, 0x200]}, 0x5c) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0xc0045878, 0x0) getsockopt$inet6_dccp_buf(r5, 0x21, 0x2, &(0x7f0000000040), &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:05:54 executing program 5 (fault-call:15 fault-nth:16): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="170000f5f2"], 0xfdef) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x5) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000240)={0x4, 0xb4, &(0x7f0000000700)="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", {0xfff, 0x200, 0x35323645, 0x7, 0x8, 0x19de, 0x0, 0x6}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffd80, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, r8}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x6, @local}, 0x10) [ 1119.890431][T25258] R13: 00000000004c82f8 R14: 00000000004de3f0 R15: 0000000000000004 [ 1119.945280][T25262] FAULT_INJECTION: forcing a failure. [ 1119.945280][T25262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.959089][T25262] CPU: 0 PID: 25262 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1119.967106][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.977202][T25262] Call Trace: [ 1119.980550][T25262] dump_stack+0x191/0x1f0 [ 1119.984935][T25262] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1119.990875][T25262] should_fail+0xa3f/0xa50 [ 1119.995349][T25262] should_fail_alloc_page+0x1fb/0x270 [ 1120.000760][T25262] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1120.006257][T25262] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1120.012269][T25262] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1120.018288][T25262] ? kmsan_slab_alloc+0xaa/0x120 [ 1120.023244][T25262] ? __kmalloc_node+0xd7a/0x1380 [ 1120.028205][T25262] ? kvmalloc_node+0x19f/0x3d0 [ 1120.032993][T25262] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1120.038917][T25262] ? default_file_splice_read+0x294/0x1060 [ 1120.044744][T25262] ? splice_direct_to_actor+0x587/0x1130 [ 1120.050397][T25262] ? do_splice_direct+0x342/0x580 [ 1120.055440][T25262] ? do_sendfile+0x1010/0x1d20 [ 1120.060239][T25262] ? __se_sys_sendfile64+0x2bb/0x360 [ 1120.065562][T25262] ? __x64_sys_sendfile64+0x56/0x70 [ 1120.070869][T25262] ? do_syscall_64+0xb6/0x160 [ 1120.075568][T25262] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1120.081660][T25262] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1120.087350][T25262] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1120.093534][T25262] ? stack_trace_save+0x11c/0x1b0 [ 1120.098601][T25262] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.104529][T25262] alloc_pages_current+0x68d/0x9a0 [ 1120.109671][T25262] push_pipe+0x660/0xbd0 [ 1120.113937][T25262] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1120.119606][T25262] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1120.125381][T25262] default_file_splice_read+0x294/0x1060 [ 1120.131061][T25262] ? security_file_permission+0x51f/0x6e0 [ 1120.136812][T25262] ? rw_verify_area+0x3a5/0x5e0 [ 1120.141706][T25262] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.147641][T25262] ? __ia32_sys_tee+0x160/0x160 [ 1120.152523][T25262] splice_direct_to_actor+0x587/0x1130 [ 1120.158003][T25262] ? do_splice_direct+0x580/0x580 [ 1120.163082][T25262] do_splice_direct+0x342/0x580 [ 1120.167975][T25262] do_sendfile+0x1010/0x1d20 [ 1120.172618][T25262] __se_sys_sendfile64+0x2bb/0x360 [ 1120.177753][T25262] ? syscall_return_slowpath+0x90/0x610 [ 1120.183329][T25262] __x64_sys_sendfile64+0x56/0x70 [ 1120.188376][T25262] do_syscall_64+0xb6/0x160 [ 1120.192909][T25262] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1120.198813][T25262] RIP: 0033:0x459f39 [ 1120.202741][T25262] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1120.222362][T25262] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1120.233751][T25262] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1120.241742][T25262] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1120.249726][T25262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1120.257713][T25262] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1120.265699][T25262] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1120.312011][T25269] device nr0 entered promiscuous mode [ 1120.327992][T25268] FAULT_INJECTION: forcing a failure. [ 1120.327992][T25268] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.341594][T25268] CPU: 0 PID: 25268 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1120.349529][T25268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:05:55 executing program 1 (fault-call:2 fault-nth:22): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1120.359625][T25268] Call Trace: [ 1120.362984][T25268] dump_stack+0x191/0x1f0 [ 1120.367401][T25268] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.373368][T25268] should_fail+0xa3f/0xa50 [ 1120.377876][T25268] __should_failslab+0x264/0x280 [ 1120.382885][T25268] should_failslab+0x29/0x70 [ 1120.387530][T25268] __kmalloc+0xae/0x430 [ 1120.391752][T25268] ? sk_prot_alloc+0x20b/0x5c0 [ 1120.396580][T25268] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.402529][T25268] sk_prot_alloc+0x20b/0x5c0 [ 1120.407157][T25268] sk_alloc+0xf3/0xb60 [ 1120.411265][T25268] __netlink_kernel_create+0x2c6/0x1210 [ 1120.416878][T25268] rtnetlink_net_init+0xa3/0x170 [ 1120.421846][T25268] ? rtnetlink_net_exit+0x90/0x90 [ 1120.426893][T25268] ? rtnetlink_rcv+0x60/0x60 [ 1120.431516][T25268] ? nlmsg_populate_fdb_fill+0x7f0/0x7f0 [ 1120.437177][T25268] ops_init+0x2d3/0x730 [ 1120.441374][T25268] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.447300][T25268] setup_net+0x28e/0x12a0 [ 1120.451663][T25268] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1120.457857][T25268] ? down_read_killable+0x12e/0x300 [ 1120.463089][T25268] copy_net_ns+0x73e/0x970 [ 1120.467548][T25268] create_new_namespaces+0x8d8/0xda0 [ 1120.472898][T25268] unshare_nsproxy_namespaces+0x25e/0x340 [ 1120.478652][T25268] ksys_unshare+0x883/0x1110 [ 1120.483297][T25268] __se_sys_unshare+0x41/0x60 [ 1120.487993][T25268] __x64_sys_unshare+0x32/0x50 [ 1120.492784][T25268] do_syscall_64+0xb6/0x160 [ 1120.497314][T25268] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1120.503219][T25268] RIP: 0033:0x459f39 [ 1120.507163][T25268] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1120.526805][T25268] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1120.535267][T25268] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1120.543255][T25268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1120.551255][T25268] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:05:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='selinuxbdev[.cpuset+\x00', 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r2, r3) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x5) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)=0x5) tee(r4, r5, 0xfff, 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x0, @empty, 0x3, 0x1, 'ovf\x00', 0x1, 0x6, 0x64}, {@loopback, 0x4e20, 0x10000, 0x4, 0x7f, 0x4}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newaddr={0x4c, 0x14, 0x100, 0x70bd25, 0x25dfdbfe, {0x2, 0x40, 0x40, 0x9f77bd797454f007, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x665c515, 0x1, 0x20, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88d1}, 0x8000084) [ 1120.559267][T25268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1120.567254][T25268] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1120.589012][T25269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:05:55 executing program 5 (fault-call:15 fault-nth:17): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0030005fba00ff000000a00000", @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1120.797994][T25283] FAULT_INJECTION: forcing a failure. [ 1120.797994][T25283] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.811041][T25283] CPU: 1 PID: 25283 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1120.818965][T25283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1120.829057][T25283] Call Trace: [ 1120.832411][T25283] dump_stack+0x191/0x1f0 [ 1120.836808][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.842774][T25283] should_fail+0xa3f/0xa50 [ 1120.847271][T25283] __should_failslab+0x264/0x280 [ 1120.852272][T25283] should_failslab+0x29/0x70 [ 1120.856925][T25283] kmem_cache_alloc_trace+0xf7/0xd20 [ 1120.862274][T25283] ? should_fail+0x177/0xa50 [ 1120.866929][T25283] ? apparmor_sk_alloc_security+0xe7/0x220 [ 1120.872801][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.878768][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.884729][T25283] apparmor_sk_alloc_security+0xe7/0x220 [ 1120.890685][T25283] ? apparmor_setprocattr+0x1580/0x1580 [ 1120.896286][T25283] security_sk_alloc+0x125/0x1f0 [ 1120.901302][T25283] sk_prot_alloc+0x3aa/0x5c0 [ 1120.905969][T25283] sk_alloc+0xf3/0xb60 [ 1120.910116][T25283] __netlink_kernel_create+0x2c6/0x1210 [ 1120.915749][T25283] rtnetlink_net_init+0xa3/0x170 [ 1120.920747][T25283] ? rtnetlink_net_exit+0x90/0x90 [ 1120.925827][T25283] ? rtnetlink_rcv+0x60/0x60 [ 1120.929844][T25287] FAULT_INJECTION: forcing a failure. [ 1120.929844][T25287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1120.930477][T25283] ? nlmsg_populate_fdb_fill+0x7f0/0x7f0 [ 1120.949392][T25283] ops_init+0x2d3/0x730 [ 1120.953599][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1120.959530][T25283] setup_net+0x28e/0x12a0 [ 1120.963919][T25283] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1120.970113][T25283] ? down_read_killable+0x12e/0x300 [ 1120.975349][T25283] copy_net_ns+0x73e/0x970 [ 1120.979810][T25283] create_new_namespaces+0x8d8/0xda0 [ 1120.985168][T25283] unshare_nsproxy_namespaces+0x25e/0x340 [ 1120.990932][T25283] ksys_unshare+0x883/0x1110 [ 1120.995574][T25283] __se_sys_unshare+0x41/0x60 [ 1121.000288][T25283] __x64_sys_unshare+0x32/0x50 [ 1121.005091][T25283] do_syscall_64+0xb6/0x160 [ 1121.009630][T25283] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1121.015542][T25283] RIP: 0033:0x459f39 [ 1121.019480][T25283] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1121.039104][T25283] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1121.047543][T25283] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1121.055529][T25283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1121.063528][T25283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1121.071514][T25283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1121.079502][T25283] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 [ 1121.087505][T25287] CPU: 0 PID: 25287 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1121.095403][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.105497][T25287] Call Trace: [ 1121.108839][T25287] dump_stack+0x191/0x1f0 [ 1121.113180][T25287] should_fail+0xa3f/0xa50 [ 1121.117600][T25287] should_fail_alloc_page+0x1fb/0x270 [ 1121.122987][T25287] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1121.128441][T25287] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1121.134849][T25287] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1121.140822][T25287] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1121.146964][T25287] ? prep_new_page+0x792/0x9b0 [ 1121.151742][T25287] ? get_page_from_freelist+0x11d3/0x19f0 [ 1121.157467][T25287] kmsan_alloc_page+0xc3/0x360 [ 1121.162242][T25287] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1121.168127][T25287] __alloc_pages_nodemask+0x149d/0x60c0 [ 1121.173663][T25287] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1121.179635][T25287] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1121.185601][T25287] ? kmsan_slab_alloc+0xaa/0x120 [ 1121.190523][T25287] ? __kmalloc_node+0xd7a/0x1380 [ 1121.195447][T25287] ? kvmalloc_node+0x19f/0x3d0 [ 1121.200197][T25287] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1121.206077][T25287] ? default_file_splice_read+0x294/0x1060 [ 1121.211875][T25287] ? splice_direct_to_actor+0x587/0x1130 [ 1121.217494][T25287] ? do_splice_direct+0x342/0x580 [ 1121.222508][T25287] ? do_sendfile+0x1010/0x1d20 [ 1121.227260][T25287] ? __se_sys_sendfile64+0x2bb/0x360 [ 1121.232533][T25287] ? __x64_sys_sendfile64+0x56/0x70 [ 1121.237718][T25287] ? do_syscall_64+0xb6/0x160 [ 1121.242381][T25287] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1121.248438][T25287] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1121.254072][T25287] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1121.260215][T25287] ? stack_trace_save+0x11c/0x1b0 [ 1121.265264][T25287] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1121.271149][T25287] alloc_pages_current+0x68d/0x9a0 [ 1121.276258][T25287] push_pipe+0x660/0xbd0 [ 1121.280486][T25287] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1121.286117][T25287] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1121.291857][T25287] default_file_splice_read+0x294/0x1060 [ 1121.297497][T25287] ? security_file_permission+0x51f/0x6e0 [ 1121.303213][T25287] ? rw_verify_area+0x3a5/0x5e0 [ 1121.308055][T25287] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1121.313938][T25287] ? __ia32_sys_tee+0x160/0x160 [ 1121.318777][T25287] splice_direct_to_actor+0x587/0x1130 [ 1121.324221][T25287] ? do_splice_direct+0x580/0x580 [ 1121.329256][T25287] do_splice_direct+0x342/0x580 [ 1121.334109][T25287] do_sendfile+0x1010/0x1d20 [ 1121.338711][T25287] __se_sys_sendfile64+0x2bb/0x360 [ 1121.343812][T25287] ? syscall_return_slowpath+0x90/0x610 [ 1121.349358][T25287] __x64_sys_sendfile64+0x56/0x70 [ 1121.354368][T25287] do_syscall_64+0xb6/0x160 [ 1121.358858][T25287] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1121.364736][T25287] RIP: 0033:0x459f39 [ 1121.368622][T25287] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1121.388215][T25287] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 00:05:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x3}, 0x1, 0x0, 0x0, 0xd53a3d91b880ec67}, 0x0) 00:05:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x4}, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) [ 1121.396625][T25287] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1121.404595][T25287] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1121.412557][T25287] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1121.420518][T25287] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1121.428481][T25287] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1121.570173][T25269] device nr0 entered promiscuous mode [ 1124.413645][T25271] FAULT_INJECTION: forcing a failure. [ 1124.413645][T25271] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.426395][T25271] CPU: 1 PID: 25271 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 1124.434295][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.444368][T25271] Call Trace: [ 1124.447707][T25271] dump_stack+0x191/0x1f0 [ 1124.452073][T25271] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1124.458003][T25271] should_fail+0xa3f/0xa50 [ 1124.462486][T25271] __should_failslab+0x264/0x280 [ 1124.467457][T25271] should_failslab+0x29/0x70 [ 1124.472056][T25271] __kmalloc_node_track_caller+0x1c9/0x13d0 [ 1124.478101][T25271] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1124.484193][T25271] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 1124.489754][T25271] ? netlink_sendmsg+0x783/0x1330 [ 1124.494792][T25271] ? netlink_sendmsg+0x783/0x1330 [ 1124.499875][T25271] __alloc_skb+0x306/0xa10 [ 1124.504320][T25271] ? netlink_sendmsg+0x783/0x1330 [ 1124.509397][T25271] netlink_sendmsg+0x783/0x1330 [ 1124.514272][T25271] ? netlink_getsockopt+0x1430/0x1430 [ 1124.519657][T25271] ___sys_sendmsg+0x14ff/0x1590 [ 1124.524528][T25271] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1124.530634][T25271] ? __fget_light+0x6b1/0x710 [ 1124.535344][T25271] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1124.541005][T25271] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1124.546910][T25271] __se_sys_sendmsg+0x305/0x460 [ 1124.551785][T25271] __x64_sys_sendmsg+0x4a/0x70 [ 1124.556559][T25271] do_syscall_64+0xb6/0x160 [ 1124.561080][T25271] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1124.566991][T25271] RIP: 0033:0x459f39 [ 1124.570919][T25271] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1124.590535][T25271] RSP: 002b:00007f3c197b8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.598972][T25271] RAX: ffffffffffffffda RBX: 00007f3c197b8c90 RCX: 0000000000459f39 00:05:59 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:05:59 executing program 5 (fault-call:15 fault-nth:18): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:05:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000002c0)={0x7, "da8e1b0f186243426a4b9513821871217988446f76fc490469a5afdcbce8d1357f3061268ef86c81520a26aa0f16d34699fd1f962cc991ba66386e2d5aea211e"}) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000000000000014ca461a90aaace7d635d1bd228eb0928695c1ac556fa4bdaec0d5510782b2575c336132cc63092c21e639eeef801a3ee4b749ae110196363fe3aacc850b9450eece73961626f4a57e84134e5aa56a87a18a172509fe8dab0560e7f4239dd8eec2d5343de98f8907b852377c1614134ca2d33b6dc855cb2035f6f6aaf17366578babd630ecf93ebaa0be8c34f25b3c679befdfbe8f23327b683ec3611398", @ANYRES32=0x0, @ANYBLOB="00c4a744b6c79c10137142c75a498c76f719000000f5ff07001b000000000069566b789b0056380dda6aff27e7f5a611a73924f1"], 0x28}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) listen(r2, 0x5) 00:05:59 executing program 1 (fault-call:2 fault-nth:23): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:05:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [{}]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000900)='X', 0x1, r2) keyctl$link(0x8, r2, 0xfffffffffffffffe) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000014c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000001500)={r4, 0x80000, r1}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x5) syz_open_dev$amidi(&(0x7f0000001540)='/dev/amidi#\x00', 0x3e, 0x0) write$binfmt_elf64(r3, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3, 0xff, 0x40, 0x6, 0x3, 0x6, 0x4, 0x2cf, 0x40, 0x20c, 0xffff, 0x0, 0x38, 0x1, 0xf7, 0x200, 0x101}, [{0x6, 0x100, 0xffffffff, 0x5, 0x6, 0x6, 0x3, 0x4}, {0x4, 0x4, 0x5, 0x40, 0x0, 0x6, 0x8, 0x101}], "", [[], []]}, 0x2b0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r2, 0x84, 0x1000}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'sha256-avx\x00'}}, &(0x7f0000000140)="ef2777d9cb68c5c2855db8a76f94d14c10c9762a7f7b5713621bbb3ff3b32e9c6936ef4f2f9ae4fc38fed4c1dd26cedaa85e989bf6b2e5252377f829978da0801c5f1b93a11e98e8e808a9e18baad94937c8c5c5017c5ceb70c7be33ecefdd498c47c907c7600b0a3811038ae3a41554e56dbc9e2fb87f00d0a5d3d003b1a52ce7ce8bae", &(0x7f0000000200)=""/4096) personality(0x4000005) 00:05:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000008780)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x505}, 0xffffffffffffff53}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000001c0)) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0xfffffffffffffffe) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0)={0x0, 0x83}, 0x2) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0xc0045878, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000180)={0x800}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r4}) r6 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8, 0x40) openat$cgroup_ro(r6, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) connect(r1, &(0x7f0000000280)=@rc={0x1f, {0x5, 0x2, 0x8, 0x5, 0x40, 0x1}, 0xf1}, 0x80) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000100)={0x2c, &(0x7f0000000040)="fe516e368b0b60e148cbce8381fc18f9c6bca1b6596fec749417cf5be923d01175e75d5868679e1c82c5d996"}) [ 1124.606948][T25271] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1124.614922][T25271] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1124.622944][T25271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c197b96d4 [ 1124.630919][T25271] R13: 00000000004c82f8 R14: 00000000004de3f0 R15: 0000000000000004 [ 1124.723317][T25311] FAULT_INJECTION: forcing a failure. [ 1124.723317][T25311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1124.736566][T25311] CPU: 1 PID: 25311 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1124.743408][T25312] FAULT_INJECTION: forcing a failure. [ 1124.743408][T25312] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.744452][T25311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.744459][T25311] Call Trace: [ 1124.744484][T25311] dump_stack+0x191/0x1f0 [ 1124.744531][T25311] should_fail+0xa3f/0xa50 [ 1124.779160][T25311] should_fail_alloc_page+0x1fb/0x270 [ 1124.784544][T25311] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1124.790013][T25311] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1124.795915][T25311] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1124.801902][T25311] ? prep_new_page+0x792/0x9b0 [ 1124.806682][T25311] ? get_page_from_freelist+0x11d3/0x19f0 [ 1124.812444][T25311] kmsan_alloc_page+0x131/0x360 [ 1124.817307][T25311] __alloc_pages_nodemask+0x149d/0x60c0 [ 1124.822871][T25311] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1124.829126][T25311] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1124.835110][T25311] ? kmsan_slab_alloc+0xaa/0x120 [ 1124.840077][T25311] ? __kmalloc_node+0xd7a/0x1380 [ 1124.845013][T25311] ? kvmalloc_node+0x19f/0x3d0 [ 1124.849778][T25311] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1124.855672][T25311] ? default_file_splice_read+0x294/0x1060 [ 1124.861473][T25311] ? splice_direct_to_actor+0x587/0x1130 [ 1124.867103][T25311] ? do_splice_direct+0x342/0x580 [ 1124.872121][T25311] ? do_sendfile+0x1010/0x1d20 [ 1124.876880][T25311] ? __se_sys_sendfile64+0x2bb/0x360 [ 1124.882166][T25311] ? __x64_sys_sendfile64+0x56/0x70 [ 1124.887450][T25311] ? do_syscall_64+0xb6/0x160 [ 1124.892125][T25311] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1124.898196][T25311] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1124.903852][T25311] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1124.910008][T25311] ? stack_trace_save+0x11c/0x1b0 [ 1124.915047][T25311] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1124.920967][T25311] alloc_pages_current+0x68d/0x9a0 [ 1124.926092][T25311] push_pipe+0x660/0xbd0 [ 1124.930336][T25311] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1124.935982][T25311] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1124.941728][T25311] default_file_splice_read+0x294/0x1060 [ 1124.947385][T25311] ? security_file_permission+0x51f/0x6e0 [ 1124.953111][T25311] ? rw_verify_area+0x3a5/0x5e0 [ 1124.957964][T25311] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1124.963864][T25311] ? __ia32_sys_tee+0x160/0x160 [ 1124.968715][T25311] splice_direct_to_actor+0x587/0x1130 [ 1124.974178][T25311] ? do_splice_direct+0x580/0x580 [ 1124.979226][T25311] do_splice_direct+0x342/0x580 [ 1124.984093][T25311] do_sendfile+0x1010/0x1d20 [ 1124.988712][T25311] __se_sys_sendfile64+0x2bb/0x360 [ 1124.993828][T25311] ? syscall_return_slowpath+0x90/0x610 [ 1124.999467][T25311] __x64_sys_sendfile64+0x56/0x70 [ 1125.004491][T25311] do_syscall_64+0xb6/0x160 [ 1125.008996][T25311] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1125.014883][T25311] RIP: 0033:0x459f39 [ 1125.018776][T25311] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1125.038376][T25311] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.046787][T25311] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1125.054751][T25311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1125.062718][T25311] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.070686][T25311] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1125.078651][T25311] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1125.086678][T25312] CPU: 0 PID: 25312 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 1125.094613][T25312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.104720][T25312] Call Trace: [ 1125.108079][T25312] dump_stack+0x191/0x1f0 [ 1125.112493][T25312] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.118471][T25312] should_fail+0xa3f/0xa50 00:06:00 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000010491008460d81002b4d0000000109021b0001040091d32c1179000009046b0001783b2400090504138d3efa51445fe18a12e7bb34"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x20, 0xc0, "4d72a2276ce0021c576509a2300f1b40502bd3c92dbd74d416012e509230e703c4e607b1adb5652d98f47f0fca1adc5a2b3432a250d2d15248295f3b45627e6231ce8a256e254d7fc854d10cdb43191b12d77855115d8561fa77cc3d250c44c849d1e9b00caf26778ee2813155db5df9adf4a7fe711d433fc11a3b76221b60c831b81cd8d3ce42734764499f0cf7b65d34071b1dd5b6fcb4380b8605c4eee26a8c1210d730e587f230ec4a03e76228c41502843cbcbf28243b9f25808e9ae587"}}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x0, &(0x7f0000000180)={@loopback, @loopback, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x150) [ 1125.122980][T25312] __should_failslab+0x264/0x280 [ 1125.128006][T25312] should_failslab+0x29/0x70 [ 1125.132663][T25312] __kmalloc+0xae/0x430 [ 1125.136879][T25312] ? kzalloc+0x7c/0xe0 [ 1125.141014][T25312] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.146977][T25312] kzalloc+0x7c/0xe0 [ 1125.150942][T25312] __netlink_kernel_create+0x5e0/0x1210 [ 1125.156613][T25312] rtnetlink_net_init+0xa3/0x170 [ 1125.161618][T25312] ? rtnetlink_net_exit+0x90/0x90 [ 1125.166687][T25312] ? rtnetlink_rcv+0x60/0x60 [ 1125.171325][T25312] ? nlmsg_populate_fdb_fill+0x7f0/0x7f0 [ 1125.177002][T25312] ops_init+0x2d3/0x730 [ 1125.181225][T25312] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.187167][T25312] setup_net+0x28e/0x12a0 [ 1125.191548][T25312] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1125.197830][T25312] ? down_read_killable+0x12e/0x300 [ 1125.203080][T25312] copy_net_ns+0x73e/0x970 [ 1125.207555][T25312] create_new_namespaces+0x8d8/0xda0 [ 1125.212915][T25312] unshare_nsproxy_namespaces+0x25e/0x340 [ 1125.218685][T25312] ksys_unshare+0x883/0x1110 [ 1125.223328][T25312] __se_sys_unshare+0x41/0x60 [ 1125.228047][T25312] __x64_sys_unshare+0x32/0x50 [ 1125.232844][T25312] do_syscall_64+0xb6/0x160 [ 1125.237376][T25312] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1125.243282][T25312] RIP: 0033:0x459f39 [ 1125.247212][T25312] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1125.266841][T25312] RSP: 002b:00007f6cb02d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1125.275301][T25312] RAX: ffffffffffffffda RBX: 00007f6cb02d7c90 RCX: 0000000000459f39 [ 1125.283295][T25312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1125.291297][T25312] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.299297][T25312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cb02d86d4 [ 1125.307291][T25312] R13: 00000000004c9c39 R14: 00000000004e16d8 R15: 0000000000000007 00:06:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x5) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffec5, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16=0x0], @ANYBLOB="00800000fcffffffff0f000000000000"], 0x3}}, 0x0) 00:06:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x5) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x71, 0x101000) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) syz_usb_connect(0x0, 0x1, &(0x7f0000002c40)=ANY=[@ANYRESHEX], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:06:00 executing program 1 (fault-call:2 fault-nth:24): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1125.436316][T25323] FAULT_INJECTION: forcing a failure. [ 1125.436316][T25323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.449712][T25323] CPU: 0 PID: 25323 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1125.457654][T25323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.467750][T25323] Call Trace: [ 1125.471092][T25323] dump_stack+0x191/0x1f0 [ 1125.475454][T25323] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.481377][T25323] should_fail+0xa3f/0xa50 [ 1125.485839][T25323] should_fail_alloc_page+0x1fb/0x270 [ 1125.491250][T25323] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1125.496739][T25323] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1125.502745][T25323] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1125.508748][T25323] ? kmsan_slab_alloc+0xaa/0x120 [ 1125.513704][T25323] ? __kmalloc_node+0xd7a/0x1380 [ 1125.518662][T25323] ? kvmalloc_node+0x19f/0x3d0 [ 1125.523448][T25323] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1125.529367][T25323] ? default_file_splice_read+0x294/0x1060 [ 1125.535201][T25323] ? splice_direct_to_actor+0x587/0x1130 [ 1125.540873][T25323] ? do_splice_direct+0x342/0x580 [ 1125.545922][T25323] ? do_sendfile+0x1010/0x1d20 [ 1125.550706][T25323] ? __se_sys_sendfile64+0x2bb/0x360 [ 1125.556101][T25323] ? __x64_sys_sendfile64+0x56/0x70 [ 1125.561321][T25323] ? do_syscall_64+0xb6/0x160 [ 1125.566052][T25323] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1125.572173][T25323] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1125.577852][T25323] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.583812][T25323] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1125.590009][T25323] ? kvmalloc_node+0x19f/0x3d0 [ 1125.594831][T25323] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.600774][T25323] alloc_pages_current+0x68d/0x9a0 [ 1125.605925][T25323] push_pipe+0x660/0xbd0 [ 1125.610197][T25323] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1125.615868][T25323] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1125.621646][T25323] default_file_splice_read+0x294/0x1060 [ 1125.627347][T25323] ? security_file_permission+0x51f/0x6e0 [ 1125.633096][T25323] ? rw_verify_area+0x3a5/0x5e0 [ 1125.638010][T25323] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.643931][T25323] ? __ia32_sys_tee+0x160/0x160 [ 1125.648809][T25323] splice_direct_to_actor+0x587/0x1130 [ 1125.654291][T25323] ? do_splice_direct+0x580/0x580 [ 1125.659366][T25323] do_splice_direct+0x342/0x580 [ 1125.664274][T25323] do_sendfile+0x1010/0x1d20 [ 1125.668918][T25323] __se_sys_sendfile64+0x2bb/0x360 [ 1125.674053][T25323] ? syscall_return_slowpath+0x90/0x610 [ 1125.679630][T25323] __x64_sys_sendfile64+0x56/0x70 [ 1125.684689][T25323] do_syscall_64+0xb6/0x160 [ 1125.689224][T25323] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1125.695136][T25323] RIP: 0033:0x459f39 [ 1125.699067][T25323] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1125.718692][T25323] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1125.727142][T25323] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1125.735129][T25323] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1125.743119][T25323] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.751109][T25323] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1125.759097][T25323] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:06:00 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x320) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:06:00 executing program 1 (fault-call:2 fault-nth:25): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1125.901393][T25331] FAULT_INJECTION: forcing a failure. [ 1125.901393][T25331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.914641][T25331] CPU: 0 PID: 25331 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1125.922541][T25331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.932602][T25331] Call Trace: [ 1125.935905][T25331] dump_stack+0x191/0x1f0 [ 1125.940249][T25331] should_fail+0xa3f/0xa50 [ 1125.944684][T25331] should_fail_alloc_page+0x1fb/0x270 [ 1125.950068][T25331] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1125.955542][T25331] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1125.961448][T25331] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1125.963522][T25333] IPVS: ftp: loaded support on port[0] = 21 [ 1125.967434][T25331] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1125.967452][T25331] ? prep_new_page+0x792/0x9b0 [ 1125.967488][T25331] ? get_page_from_freelist+0x11d3/0x19f0 [ 1125.967542][T25331] kmsan_alloc_page+0xc3/0x360 [ 1125.994806][T25331] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1126.000706][T25331] __alloc_pages_nodemask+0x149d/0x60c0 [ 1126.006263][T25331] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1126.012257][T25331] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1126.018239][T25331] ? kmsan_slab_alloc+0xaa/0x120 [ 1126.023172][T25331] ? __kmalloc_node+0xd7a/0x1380 [ 1126.028105][T25331] ? kvmalloc_node+0x19f/0x3d0 [ 1126.032871][T25331] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1126.038766][T25331] ? default_file_splice_read+0x294/0x1060 [ 1126.044574][T25331] ? splice_direct_to_actor+0x587/0x1130 [ 1126.050202][T25331] ? do_splice_direct+0x342/0x580 [ 1126.055571][T25331] ? do_sendfile+0x1010/0x1d20 [ 1126.060329][T25331] ? __se_sys_sendfile64+0x2bb/0x360 [ 1126.065612][T25331] ? __x64_sys_sendfile64+0x56/0x70 [ 1126.070806][T25331] ? do_syscall_64+0xb6/0x160 [ 1126.075479][T25331] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1126.081546][T25331] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1126.087198][T25331] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1126.093353][T25331] ? stack_trace_save+0x11c/0x1b0 [ 1126.098391][T25331] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1126.104287][T25331] alloc_pages_current+0x68d/0x9a0 [ 1126.109407][T25331] push_pipe+0x660/0xbd0 [ 1126.113653][T25331] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1126.119301][T25331] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1126.125045][T25331] default_file_splice_read+0x294/0x1060 [ 1126.130699][T25331] ? security_file_permission+0x51f/0x6e0 [ 1126.136431][T25331] ? rw_verify_area+0x3a5/0x5e0 [ 1126.141286][T25331] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1126.147177][T25331] ? __ia32_sys_tee+0x160/0x160 [ 1126.152027][T25331] splice_direct_to_actor+0x587/0x1130 [ 1126.157481][T25331] ? do_splice_direct+0x580/0x580 [ 1126.162527][T25331] do_splice_direct+0x342/0x580 [ 1126.167397][T25331] do_sendfile+0x1010/0x1d20 [ 1126.172015][T25331] __se_sys_sendfile64+0x2bb/0x360 [ 1126.177131][T25331] ? syscall_return_slowpath+0x90/0x610 [ 1126.182682][T25331] __x64_sys_sendfile64+0x56/0x70 [ 1126.187709][T25331] do_syscall_64+0xb6/0x160 [ 1126.192218][T25331] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1126.198100][T25331] RIP: 0033:0x459f39 [ 1126.201994][T25331] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1126.221590][T25331] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1126.229994][T25331] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1126.237960][T25331] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1126.245927][T25331] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1126.253911][T25331] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1126.261876][T25331] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1126.277067][T19704] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1126.700004][T25334] IPVS: ftp: loaded support on port[0] = 21 [ 1126.851869][T19704] usb 3-1: Using ep0 maxpacket: 8 [ 1126.982258][T19704] usb 3-1: config 4 has an invalid descriptor of length 44, skipping remainder of the config [ 1126.992782][T19704] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1127.001929][T19704] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=4d.2b [ 1127.011039][T19704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.267522][T19704] usb 3-1: USB disconnect, device number 31 [ 1128.031906][T24899] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1128.271912][T24899] usb 3-1: Using ep0 maxpacket: 8 [ 1128.392187][T24899] usb 3-1: config 4 has an invalid descriptor of length 44, skipping remainder of the config [ 1128.402602][T24899] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1128.411613][T24899] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=4d.2b [ 1128.420816][T24899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.675880][T19709] usb 3-1: USB disconnect, device number 32 [ 1130.893304][T25339] FAULT_INJECTION: forcing a failure. [ 1130.893304][T25339] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.906061][T25339] CPU: 0 PID: 25339 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 1130.913956][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1130.924014][T25339] Call Trace: [ 1130.927332][T25339] dump_stack+0x191/0x1f0 [ 1130.931684][T25339] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1130.937656][T25339] should_fail+0xa3f/0xa50 [ 1130.942138][T25339] __should_failslab+0x264/0x280 [ 1130.947183][T25339] should_failslab+0x29/0x70 [ 1130.951789][T25339] kmem_cache_alloc+0xd6/0xd10 [ 1130.956566][T25339] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1130.962488][T25339] ? skb_clone+0x326/0x5d0 [ 1130.966939][T25339] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1130.974838][T25339] skb_clone+0x326/0x5d0 [ 1130.979097][T25339] netlink_deliver_tap+0x804/0xeb0 [ 1130.984240][T25339] netlink_unicast+0xde9/0x1020 [ 1130.989107][T25339] netlink_sendmsg+0x110f/0x1330 [ 1130.994065][T25339] ? netlink_getsockopt+0x1430/0x1430 [ 1130.999445][T25339] ___sys_sendmsg+0x14ff/0x1590 [ 1131.004307][T25339] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1131.010410][T25339] ? __fget_light+0x6b1/0x710 [ 1131.015105][T25339] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1131.020776][T25339] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1131.026684][T25339] __se_sys_sendmsg+0x305/0x460 [ 1131.031556][T25339] __x64_sys_sendmsg+0x4a/0x70 [ 1131.036350][T25339] do_syscall_64+0xb6/0x160 [ 1131.040882][T25339] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1131.046776][T25339] RIP: 0033:0x459f39 [ 1131.050679][T25339] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1131.070340][T25339] RSP: 002b:00007f3c197b8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.078801][T25339] RAX: ffffffffffffffda RBX: 00007f3c197b8c90 RCX: 0000000000459f39 [ 1131.086774][T25339] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1131.094750][T25339] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1131.102721][T25339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c197b96d4 [ 1131.110713][T25339] R13: 00000000004c82f8 R14: 00000000004de3f0 R15: 0000000000000004 00:06:06 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:06:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x541000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000080)=0x400005, 0x235) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) 00:06:06 executing program 1 (fault-call:2 fault-nth:26): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:06:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x96, 0x92, 0xc7, 0x8, 0xaf0, 0xd058, 0xeefd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0xff, 0x43, 0xa0}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xffffffffffffffbc, &(0x7f00000001c0)={0x40, 0x0, 0xffffffffffffffb1, "6e22588282085b4b37dea24d625cc703f4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:06:06 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000140)={@mcast2}, &(0x7f00000001c0)=0x14) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) 00:06:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000f59ffc)=0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f000070aef1)=ANY=[@ANYBLOB="ff050000010096a58c5eeec008004500001c0000000000119078ac14f7bbffffffff00004e2000089078"], 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 1131.224741][T25352] FAULT_INJECTION: forcing a failure. [ 1131.224741][T25352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1131.237983][T25352] CPU: 1 PID: 25352 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1131.245872][T25352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.255925][T25352] Call Trace: [ 1131.259225][T25352] dump_stack+0x191/0x1f0 [ 1131.263568][T25352] should_fail+0xa3f/0xa50 [ 1131.265584][T25344] IPVS: ftp: loaded support on port[0] = 21 [ 1131.268001][T25352] should_fail_alloc_page+0x1fb/0x270 [ 1131.268025][T25352] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1131.268065][T25352] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1131.290638][T25352] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1131.296627][T25352] ? prep_new_page+0x792/0x9b0 [ 1131.301409][T25352] ? get_page_from_freelist+0x11d3/0x19f0 [ 1131.307160][T25352] kmsan_alloc_page+0x131/0x360 [ 1131.312030][T25352] __alloc_pages_nodemask+0x149d/0x60c0 [ 1131.317592][T25352] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1131.323579][T25352] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1131.329560][T25352] ? kmsan_slab_alloc+0xaa/0x120 [ 1131.334492][T25352] ? __kmalloc_node+0xd7a/0x1380 [ 1131.339431][T25352] ? kvmalloc_node+0x19f/0x3d0 [ 1131.344195][T25352] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1131.350084][T25352] ? default_file_splice_read+0x294/0x1060 [ 1131.355887][T25352] ? splice_direct_to_actor+0x587/0x1130 [ 1131.361514][T25352] ? do_splice_direct+0x342/0x580 [ 1131.366534][T25352] ? do_sendfile+0x1010/0x1d20 [ 1131.371294][T25352] ? __se_sys_sendfile64+0x2bb/0x360 [ 1131.376661][T25352] ? __x64_sys_sendfile64+0x56/0x70 [ 1131.381858][T25352] ? do_syscall_64+0xb6/0x160 [ 1131.386533][T25352] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1131.392604][T25352] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1131.398255][T25352] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1131.405486][T25352] ? stack_trace_save+0x11c/0x1b0 [ 1131.410551][T25352] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1131.416456][T25352] alloc_pages_current+0x68d/0x9a0 [ 1131.421581][T25352] push_pipe+0x660/0xbd0 [ 1131.425827][T25352] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1131.431482][T25352] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1131.437225][T25352] default_file_splice_read+0x294/0x1060 [ 1131.442888][T25352] ? security_file_permission+0x51f/0x6e0 [ 1131.448612][T25352] ? rw_verify_area+0x3a5/0x5e0 [ 1131.453470][T25352] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1131.459368][T25352] ? __ia32_sys_tee+0x160/0x160 [ 1131.464219][T25352] splice_direct_to_actor+0x587/0x1130 [ 1131.469674][T25352] ? do_splice_direct+0x580/0x580 [ 1131.474725][T25352] do_splice_direct+0x342/0x580 [ 1131.479595][T25352] do_sendfile+0x1010/0x1d20 [ 1131.484222][T25352] __se_sys_sendfile64+0x2bb/0x360 [ 1131.489334][T25352] ? syscall_return_slowpath+0x90/0x610 [ 1131.494891][T25352] __x64_sys_sendfile64+0x56/0x70 [ 1131.499915][T25352] do_syscall_64+0xb6/0x160 [ 1131.504422][T25352] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1131.510308][T25352] RIP: 0033:0x459f39 [ 1131.514982][T25352] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1131.534583][T25352] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1131.542996][T25352] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1131.550965][T25352] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1131.558928][T25352] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1131.566892][T25352] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1131.574863][T25352] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1131.651953][T19708] usb 4-1: new high-speed USB device number 32 using dummy_hcd 00:06:06 executing program 1 (fault-call:2 fault-nth:27): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:06:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 1131.821186][T25360] FAULT_INJECTION: forcing a failure. [ 1131.821186][T25360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1131.834604][T25360] CPU: 0 PID: 25360 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1131.842528][T25360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.852614][T25360] Call Trace: [ 1131.855957][T25360] dump_stack+0x191/0x1f0 [ 1131.860349][T25360] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1131.866311][T25360] should_fail+0xa3f/0xa50 [ 1131.870811][T25360] should_fail_alloc_page+0x1fb/0x270 [ 1131.876248][T25360] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1131.881785][T25360] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1131.887820][T25360] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1131.893864][T25360] ? kmsan_slab_alloc+0xaa/0x120 [ 1131.898845][T25360] ? __kmalloc_node+0xd7a/0x1380 [ 1131.903838][T25360] ? kvmalloc_node+0x19f/0x3d0 [ 1131.908664][T25360] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1131.914615][T25360] ? default_file_splice_read+0x294/0x1060 [ 1131.920470][T25360] ? splice_direct_to_actor+0x587/0x1130 [ 1131.926162][T25360] ? do_splice_direct+0x342/0x580 [ 1131.931239][T25360] ? do_sendfile+0x1010/0x1d20 [ 1131.936046][T25360] ? __se_sys_sendfile64+0x2bb/0x360 [ 1131.941376][T25360] ? __x64_sys_sendfile64+0x56/0x70 [ 1131.946621][T25360] ? do_syscall_64+0xb6/0x160 [ 1131.951350][T25360] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1131.957477][T25360] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1131.963201][T25360] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1131.969414][T25360] ? stack_trace_save+0x11c/0x1b0 [ 1131.974522][T25360] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1131.980476][T25360] alloc_pages_current+0x68d/0x9a0 [ 1131.985656][T25360] push_pipe+0x660/0xbd0 [ 1131.989950][T25360] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1131.995659][T25360] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1132.001477][T25360] default_file_splice_read+0x294/0x1060 [ 1132.007210][T25360] ? security_file_permission+0x51f/0x6e0 [ 1132.013005][T25360] ? rw_verify_area+0x3a5/0x5e0 [ 1132.017927][T25360] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1132.023897][T25360] ? __ia32_sys_tee+0x160/0x160 [ 1132.028811][T25360] splice_direct_to_actor+0x587/0x1130 [ 1132.034323][T25360] ? do_splice_direct+0x580/0x580 [ 1132.039441][T25360] do_splice_direct+0x342/0x580 [ 1132.044356][T25360] do_sendfile+0x1010/0x1d20 [ 1132.049003][T25360] __se_sys_sendfile64+0x2bb/0x360 [ 1132.054143][T25360] ? syscall_return_slowpath+0x90/0x610 [ 1132.059717][T25360] __x64_sys_sendfile64+0x56/0x70 [ 1132.064763][T25360] do_syscall_64+0xb6/0x160 [ 1132.069307][T25360] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1132.075216][T25360] RIP: 0033:0x459f39 [ 1132.079396][T25360] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1132.099017][T25360] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1132.107481][T25360] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 00:06:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) r1 = getpid() getpriority(0x2, r1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1132.115468][T25360] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1132.123465][T25360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1132.131471][T25360] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1132.139457][T25360] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 00:06:07 executing program 1 (fault-call:2 fault-nth:28): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:06:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000240)=0x1e) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x6c}}, 0x0) [ 1132.212183][T19708] usb 4-1: Using ep0 maxpacket: 8 [ 1132.218788][T25355] IPVS: ftp: loaded support on port[0] = 21 00:06:07 executing program 4: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x1, 0x2, 0x1, {0x2, 0x8001, 0xbd1f, 0x9}}) r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) [ 1132.318399][T25373] FAULT_INJECTION: forcing a failure. [ 1132.318399][T25373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1132.331646][T25373] CPU: 0 PID: 25373 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1132.339538][T25373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1132.349593][T25373] Call Trace: [ 1132.352883][T25373] dump_stack+0x191/0x1f0 [ 1132.357208][T25373] should_fail+0xa3f/0xa50 [ 1132.361626][T25373] should_fail_alloc_page+0x1fb/0x270 [ 1132.366993][T25373] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1132.372451][T25373] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1132.378338][T25373] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1132.384310][T25373] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1132.390450][T25373] ? prep_new_page+0x792/0x9b0 [ 1132.395218][T25373] ? get_page_from_freelist+0x11d3/0x19f0 [ 1132.400945][T25373] kmsan_alloc_page+0xc3/0x360 [ 1132.405702][T25373] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1132.411722][T25373] __alloc_pages_nodemask+0x149d/0x60c0 [ 1132.417270][T25373] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1132.423256][T25373] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1132.429224][T25373] ? kmsan_slab_alloc+0xaa/0x120 [ 1132.434151][T25373] ? __kmalloc_node+0xd7a/0x1380 [ 1132.439081][T25373] ? kvmalloc_node+0x19f/0x3d0 [ 1132.443845][T25373] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1132.449757][T25373] ? default_file_splice_read+0x294/0x1060 [ 1132.455554][T25373] ? splice_direct_to_actor+0x587/0x1130 [ 1132.461174][T25373] ? do_splice_direct+0x342/0x580 [ 1132.466189][T25373] ? do_sendfile+0x1010/0x1d20 [ 1132.470937][T25373] ? __se_sys_sendfile64+0x2bb/0x360 [ 1132.476209][T25373] ? __x64_sys_sendfile64+0x56/0x70 [ 1132.481393][T25373] ? do_syscall_64+0xb6/0x160 [ 1132.486073][T25373] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1132.492130][T25373] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1132.497763][T25373] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1132.503910][T25373] ? stack_trace_save+0x11c/0x1b0 [ 1132.508937][T25373] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1132.514821][T25373] alloc_pages_current+0x68d/0x9a0 [ 1132.519928][T25373] push_pipe+0x660/0xbd0 [ 1132.524159][T25373] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1132.529791][T25373] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1132.535520][T25373] default_file_splice_read+0x294/0x1060 [ 1132.541158][T25373] ? security_file_permission+0x51f/0x6e0 [ 1132.546874][T25373] ? rw_verify_area+0x3a5/0x5e0 [ 1132.551722][T25373] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1132.557601][T25373] ? __ia32_sys_tee+0x160/0x160 [ 1132.562445][T25373] splice_direct_to_actor+0x587/0x1130 [ 1132.567891][T25373] ? do_splice_direct+0x580/0x580 [ 1132.572926][T25373] do_splice_direct+0x342/0x580 [ 1132.577778][T25373] do_sendfile+0x1010/0x1d20 [ 1132.582529][T25373] __se_sys_sendfile64+0x2bb/0x360 [ 1132.587639][T25373] ? syscall_return_slowpath+0x90/0x610 [ 1132.593188][T25373] __x64_sys_sendfile64+0x56/0x70 [ 1132.598208][T25373] do_syscall_64+0xb6/0x160 [ 1132.602719][T25373] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1132.608603][T25373] RIP: 0033:0x459f39 [ 1132.612492][T25373] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1132.635581][T25373] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1132.643980][T25373] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1132.651936][T25373] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1132.659891][T25373] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1132.669765][T25373] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1132.677724][T25373] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1132.692564][T19708] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1132.700908][T19708] usb 4-1: config 0 has no interface number 0 [ 1132.707215][T19708] usb 4-1: New USB device found, idVendor=0af0, idProduct=d058, bcdDevice=ee.fd [ 1132.716406][T19708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.734895][T25379] Started in network mode [ 1132.739353][T25379] Own node identity , cluster identity 4711 [ 1132.745337][T25379] Failed to set node id, please configure manually [ 1132.752002][T25379] Enabling of bearer rejected, failed to enable media [ 1132.790835][T19708] usb 4-1: config 0 descriptor?? [ 1133.055775][T19708] usb 4-1: USB disconnect, device number 32 [ 1133.801846][T24899] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1134.051923][T24899] usb 4-1: Using ep0 maxpacket: 8 [ 1134.192106][T24899] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1134.200438][T24899] usb 4-1: config 0 has no interface number 0 [ 1134.206754][T24899] usb 4-1: New USB device found, idVendor=0af0, idProduct=d058, bcdDevice=ee.fd [ 1134.215973][T24899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.225550][T24899] usb 4-1: config 0 descriptor?? [ 1134.496555][T24899] usb 4-1: USB disconnect, device number 33 [ 1135.376057][T25385] FAULT_INJECTION: forcing a failure. [ 1135.376057][T25385] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.388806][T25385] CPU: 0 PID: 25385 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 1135.396725][T25385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.406867][T25385] Call Trace: [ 1135.410175][T25385] dump_stack+0x191/0x1f0 [ 1135.414519][T25385] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1135.420422][T25385] should_fail+0xa3f/0xa50 [ 1135.424867][T25385] __should_failslab+0x264/0x280 [ 1135.429872][T25385] should_failslab+0x29/0x70 [ 1135.434498][T25385] __kmalloc_track_caller+0x1ad/0xea0 [ 1135.439883][T25385] ? kasprintf+0x1f7/0x240 [ 1135.444327][T25385] kvasprintf+0x169/0x350 [ 1135.448680][T25385] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1135.454596][T25385] kasprintf+0x1f7/0x240 [ 1135.458891][T25385] hwsim_new_radio_nl+0xf93/0x1970 [ 1135.464076][T25385] ? hwsim_tx_info_frame_received_nl+0x1210/0x1210 [ 1135.470586][T25385] genl_rcv_msg+0x16c5/0x1f20 [ 1135.475330][T25385] netlink_rcv_skb+0x431/0x620 [ 1135.480119][T25385] ? genl_unbind+0x390/0x390 [ 1135.484758][T25385] genl_rcv+0x63/0x80 [ 1135.488755][T25385] netlink_unicast+0xf3e/0x1020 [ 1135.493626][T25385] netlink_sendmsg+0x110f/0x1330 [ 1135.498613][T25385] ? netlink_getsockopt+0x1430/0x1430 [ 1135.504011][T25385] ___sys_sendmsg+0x14ff/0x1590 [ 1135.508897][T25385] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1135.514999][T25385] ? __fget_light+0x6b1/0x710 [ 1135.519686][T25385] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1135.525360][T25385] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1135.531270][T25385] __se_sys_sendmsg+0x305/0x460 [ 1135.536148][T25385] __x64_sys_sendmsg+0x4a/0x70 [ 1135.540946][T25385] do_syscall_64+0xb6/0x160 [ 1135.545488][T25385] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1135.551380][T25385] RIP: 0033:0x459f39 [ 1135.555283][T25385] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:06:10 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x100000000000025b, &(0x7f0000000100)={&(0x7f0000001700)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x8, 0x11, [@generic="80"]}]}, 0x1c}, 0x1, 0x6087ffffffff}, 0x0) 00:06:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00 '], 0x28}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001340)='/proc/capi/\x80api20nccI\x00', 0x8000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x5) sendmsg$nl_netfilter(r3, &(0x7f0000001300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0x7, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x3}}, 0x4000000) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) r5 = gettid() ptrace(0x4206, r5) tkill(r5, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x9, 0x7, r5, 0x0, 0xee01, 0x0, 0xcf74, 0x4}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000040)=0x5) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000200)=0x42) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x10001, 0x2, 0x8, 0x3f, 0x7f, 0x81, 0x8, 0x4}}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x7f}, 0x2) 00:06:10 executing program 1 (fault-call:2 fault-nth:29): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 00:06:10 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="fe541c69b690f98ea7519f199b3cb2f80f644ba23a1e070d0045c2fe28ad5cf69335acd98e8a8ab9d6783ea9295e36b747dda05f9d199b0000"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) clone3(&(0x7f0000000340)={0x10000, &(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000200), 0x8, 0x0, &(0x7f0000000240)=""/142, 0x8e, &(0x7f0000000300)=""/39}, 0x40) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x1000, &(0x7f0000000380)=""/211) 00:06:10 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180)=0x20, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0xc0045878, 0x0) r3 = accept(r1, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0xfffffffffffffe5e) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x8, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x180000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0xffff) 00:06:10 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 1135.574969][T25385] RSP: 002b:00007f3c197b8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.583446][T25385] RAX: ffffffffffffffda RBX: 00007f3c197b8c90 RCX: 0000000000459f39 [ 1135.591469][T25385] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1135.599482][T25385] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1135.607484][T25385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c197b96d4 [ 1135.615463][T25385] R13: 00000000004c82f8 R14: 00000000004de3f0 R15: 0000000000000004 [ 1135.714648][T25396] FAULT_INJECTION: forcing a failure. [ 1135.714648][T25396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1135.727905][T25396] CPU: 1 PID: 25396 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1135.735802][T25396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.745873][T25396] Call Trace: [ 1135.749273][T25396] dump_stack+0x191/0x1f0 [ 1135.753628][T25396] should_fail+0xa3f/0xa50 [ 1135.758073][T25396] should_fail_alloc_page+0x1fb/0x270 [ 1135.763465][T25396] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1135.768952][T25396] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1135.774860][T25396] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1135.780834][T25396] ? prep_new_page+0x792/0x9b0 [ 1135.785605][T25396] ? get_page_from_freelist+0x11d3/0x19f0 [ 1135.791340][T25396] kmsan_alloc_page+0x131/0x360 [ 1135.796187][T25396] __alloc_pages_nodemask+0x149d/0x60c0 [ 1135.801726][T25396] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1135.807711][T25396] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1135.813679][T25396] ? kmsan_slab_alloc+0xaa/0x120 [ 1135.818601][T25396] ? __kmalloc_node+0xd7a/0x1380 [ 1135.823540][T25396] ? kvmalloc_node+0x19f/0x3d0 [ 1135.828291][T25396] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1135.834176][T25396] ? default_file_splice_read+0x294/0x1060 [ 1135.839988][T25396] ? splice_direct_to_actor+0x587/0x1130 [ 1135.845612][T25396] ? do_splice_direct+0x342/0x580 [ 1135.850624][T25396] ? do_sendfile+0x1010/0x1d20 [ 1135.855384][T25396] ? __se_sys_sendfile64+0x2bb/0x360 [ 1135.860659][T25396] ? __x64_sys_sendfile64+0x56/0x70 [ 1135.865843][T25396] ? do_syscall_64+0xb6/0x160 [ 1135.870506][T25396] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1135.876596][T25396] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1135.882233][T25396] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1135.888375][T25396] ? stack_trace_save+0x11c/0x1b0 [ 1135.893402][T25396] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1135.899288][T25396] alloc_pages_current+0x68d/0x9a0 [ 1135.906050][T25396] push_pipe+0x660/0xbd0 [ 1135.910283][T25396] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1135.915912][T25396] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1135.921639][T25396] default_file_splice_read+0x294/0x1060 [ 1135.927292][T25396] ? security_file_permission+0x51f/0x6e0 [ 1135.933017][T25396] ? rw_verify_area+0x3a5/0x5e0 [ 1135.937875][T25396] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1135.943757][T25396] ? __ia32_sys_tee+0x160/0x160 [ 1135.948597][T25396] splice_direct_to_actor+0x587/0x1130 [ 1135.955785][T25396] ? do_splice_direct+0x580/0x580 [ 1135.960820][T25396] do_splice_direct+0x342/0x580 [ 1135.965694][T25396] do_sendfile+0x1010/0x1d20 [ 1135.970295][T25396] __se_sys_sendfile64+0x2bb/0x360 [ 1135.975396][T25396] ? syscall_return_slowpath+0x90/0x610 [ 1135.980936][T25396] __x64_sys_sendfile64+0x56/0x70 [ 1135.985951][T25396] do_syscall_64+0xb6/0x160 [ 1135.990448][T25396] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1135.996326][T25396] RIP: 0033:0x459f39 [ 1136.000211][T25396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1136.019800][T25396] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1136.028547][T25396] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1136.036523][T25396] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1136.044479][T25396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1136.052448][T25396] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 00:06:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000001fe8)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000f5ff07001b0000000000"], 0x28}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x101, 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0xc0045878, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0x8000}, &(0x7f0000000140)=0x8) [ 1136.060414][T25396] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1136.159146][T25395] IPVS: ftp: loaded support on port[0] = 21 00:06:11 executing program 1 (fault-call:2 fault-nth:30): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1136.379568][T25402] FAULT_INJECTION: forcing a failure. [ 1136.379568][T25402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1136.393188][T25402] CPU: 0 PID: 25402 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1136.401123][T25402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.411354][T25402] Call Trace: [ 1136.414718][T25402] dump_stack+0x191/0x1f0 [ 1136.419129][T25402] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1136.425357][T25402] should_fail+0xa3f/0xa50 [ 1136.437594][T25402] should_fail_alloc_page+0x1fb/0x270 [ 1136.443047][T25402] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1136.448663][T25402] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1136.454706][T25402] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1136.460739][T25402] ? kmsan_slab_alloc+0xaa/0x120 [ 1136.465726][T25402] ? __kmalloc_node+0xd7a/0x1380 [ 1136.470720][T25402] ? kvmalloc_node+0x19f/0x3d0 [ 1136.475534][T25402] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1136.481489][T25402] ? default_file_splice_read+0x294/0x1060 [ 1136.487374][T25402] ? splice_direct_to_actor+0x587/0x1130 [ 1136.493061][T25402] ? do_splice_direct+0x342/0x580 [ 1136.498140][T25402] ? do_sendfile+0x1010/0x1d20 [ 1136.502951][T25402] ? __se_sys_sendfile64+0x2bb/0x360 [ 1136.508284][T25402] ? __x64_sys_sendfile64+0x56/0x70 [ 1136.513535][T25402] ? do_syscall_64+0xb6/0x160 [ 1136.518352][T25402] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1136.524478][T25402] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1136.530205][T25402] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1136.536419][T25402] ? stack_trace_save+0x11c/0x1b0 [ 1136.541527][T25402] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1136.547487][T25402] alloc_pages_current+0x68d/0x9a0 [ 1136.552667][T25402] push_pipe+0x660/0xbd0 [ 1136.556971][T25402] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1136.562678][T25402] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1136.568488][T25402] default_file_splice_read+0x294/0x1060 [ 1136.574213][T25402] ? security_file_permission+0x51f/0x6e0 [ 1136.580010][T25402] ? rw_verify_area+0x3a5/0x5e0 [ 1136.584946][T25402] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1136.590901][T25402] ? __ia32_sys_tee+0x160/0x160 [ 1136.595811][T25402] splice_direct_to_actor+0x587/0x1130 [ 1136.601325][T25402] ? do_splice_direct+0x580/0x580 [ 1136.607401][T25402] do_splice_direct+0x342/0x580 [ 1136.612335][T25402] do_sendfile+0x1010/0x1d20 [ 1136.617016][T25402] __se_sys_sendfile64+0x2bb/0x360 [ 1136.622187][T25402] ? syscall_return_slowpath+0x90/0x610 [ 1136.627798][T25402] __x64_sys_sendfile64+0x56/0x70 [ 1136.632878][T25402] do_syscall_64+0xb6/0x160 [ 1136.637437][T25402] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1136.643367][T25402] RIP: 0033:0x459f39 [ 1136.647313][T25402] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1136.666977][T25402] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1136.675456][T25402] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1136.683468][T25402] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1136.691480][T25402] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1136.699496][T25402] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1136.707504][T25402] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 [ 1136.709845][T25398] IPVS: ftp: loaded support on port[0] = 21 00:06:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000a00)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002f80)={0x84, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000054c0)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x1, "bb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:06:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000002c0)={r1}, 0x8) 00:06:11 executing program 1 (fault-call:2 fault-nth:31): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) [ 1136.950488][T25417] FAULT_INJECTION: forcing a failure. [ 1136.950488][T25417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1136.963731][T25417] CPU: 1 PID: 25417 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1136.971628][T25417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.981687][T25417] Call Trace: [ 1136.984996][T25417] dump_stack+0x191/0x1f0 [ 1136.989349][T25417] should_fail+0xa3f/0xa50 [ 1136.993791][T25417] should_fail_alloc_page+0x1fb/0x270 [ 1136.999179][T25417] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1137.004657][T25417] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.010572][T25417] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 1137.016560][T25417] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1137.022712][T25417] ? prep_new_page+0x792/0x9b0 [ 1137.027498][T25417] ? get_page_from_freelist+0x11d3/0x19f0 [ 1137.033258][T25417] kmsan_alloc_page+0xc3/0x360 [ 1137.038036][T25417] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.043947][T25417] __alloc_pages_nodemask+0x149d/0x60c0 [ 1137.049502][T25417] ? kmsan_internal_poison_shadow+0xbd/0x120 [ 1137.055490][T25417] ? kmsan_internal_poison_shadow+0x60/0x120 [ 1137.061477][T25417] ? kmsan_slab_alloc+0xaa/0x120 [ 1137.066417][T25417] ? __kmalloc_node+0xd7a/0x1380 [ 1137.071363][T25417] ? kvmalloc_node+0x19f/0x3d0 [ 1137.076127][T25417] ? iov_iter_get_pages_alloc+0x176a/0x1e40 [ 1137.082030][T25417] ? default_file_splice_read+0x294/0x1060 [ 1137.087844][T25417] ? splice_direct_to_actor+0x587/0x1130 [ 1137.093488][T25417] ? do_splice_direct+0x342/0x580 [ 1137.098514][T25417] ? do_sendfile+0x1010/0x1d20 [ 1137.103276][T25417] ? __se_sys_sendfile64+0x2bb/0x360 [ 1137.108563][T25417] ? __x64_sys_sendfile64+0x56/0x70 [ 1137.113763][T25417] ? do_syscall_64+0xb6/0x160 [ 1137.118449][T25417] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1137.124524][T25417] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1137.130188][T25417] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1137.136355][T25417] ? stack_trace_save+0x11c/0x1b0 [ 1137.141403][T25417] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.147309][T25417] alloc_pages_current+0x68d/0x9a0 [ 1137.152435][T25417] push_pipe+0x660/0xbd0 [ 1137.156684][T25417] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1137.162333][T25417] iov_iter_get_pages_alloc+0x1879/0x1e40 [ 1137.168088][T25417] default_file_splice_read+0x294/0x1060 [ 1137.173746][T25417] ? security_file_permission+0x51f/0x6e0 [ 1137.179477][T25417] ? rw_verify_area+0x3a5/0x5e0 [ 1137.184341][T25417] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.190241][T25417] ? __ia32_sys_tee+0x160/0x160 [ 1137.195099][T25417] splice_direct_to_actor+0x587/0x1130 [ 1137.200651][T25417] ? do_splice_direct+0x580/0x580 [ 1137.205709][T25417] do_splice_direct+0x342/0x580 [ 1137.210581][T25417] do_sendfile+0x1010/0x1d20 [ 1137.215204][T25417] __se_sys_sendfile64+0x2bb/0x360 [ 1137.220324][T25417] ? syscall_return_slowpath+0x90/0x610 [ 1137.225884][T25417] __x64_sys_sendfile64+0x56/0x70 [ 1137.230917][T25417] do_syscall_64+0xb6/0x160 [ 1137.235425][T25417] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1137.241312][T25417] RIP: 0033:0x459f39 [ 1137.245209][T25417] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1137.264919][T25417] RSP: 002b:00007fd9dcd47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1137.273331][T25417] RAX: ffffffffffffffda RBX: 00007fd9dcd47c90 RCX: 0000000000459f39 [ 1137.281307][T25417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1137.289279][T25417] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:06:12 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80400) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x400, 0x0) r3 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x2, r3}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0xc0045878, 0x0) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x7fff, 0x121a00) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000040)=0x5) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000040)=0x5) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r9, 0x40045612, &(0x7f0000000040)=0x5) r10 = gettid() ptrace(0x4206, r10) tkill(r10, 0x9) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r13, r14}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r15, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r17, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r15, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r17}, {0x2, 0x1}], {}, [{0x8, 0x4, r18}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r19 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r19, 0x40045612, &(0x7f0000000040)=0x5) r20 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r20, 0x40045612, &(0x7f0000000040)=0x5) r21 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r21, 0x40045612, &(0x7f0000000040)=0x5) r22 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r22, 0x40045612, &(0x7f0000000040)=0x5) r23 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r23, 0xc0045878, 0x0) ioctl$sock_SIOCGPGRP(r23, 0x8904, &(0x7f0000000a00)=0x0) r25 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r25, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r27, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r25, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r27}, {0x2, 0x1}], {}, [{0x8, 0x4, r28}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) r30 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r30, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r31 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r32, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r30, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r32}, {0x2, 0x1}], {}, [{0x8, 0x4, r33}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r34 = gettid() ptrace(0x4206, r34) tkill(r34, 0x9) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r37 = clone3(&(0x7f0000002580)={0x42080000, &(0x7f00000022c0), &(0x7f0000002300), &(0x7f0000002340), 0x1e, 0x0, &(0x7f0000002380)=""/238, 0xee, &(0x7f0000002480)=""/245}, 0x40) getresuid(&(0x7f00000025c0), &(0x7f0000002600), &(0x7f0000002640)=0x0) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r40 = getgid() r41 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r42 = openat$null(0xffffffffffffff9c, &(0x7f0000002700)='/dev/null\x00', 0x2000, 0x0) r43 = gettid() ptrace(0x4206, r43) tkill(r43, 0x9) r44 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r45 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r45, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r44, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r46, r47}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) r48 = getegid() r49 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r49, 0x40045612, &(0x7f0000000040)=0x5) r50 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r50, 0x40045612, &(0x7f0000000040)=0x5) r51 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r51, 0x40045612, &(0x7f0000000040)=0x5) r52 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r52, 0x40045612, &(0x7f0000000040)=0x5) r53 = accept4(0xffffffffffffffff, &(0x7f0000002740)=@caif, &(0x7f00000027c0)=0x80, 0x800) r54 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r54, 0x40045612, &(0x7f0000000040)=0x5) pipe2$9p(&(0x7f0000002800)={0xffffffffffffffff}, 0x0) r56 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r56, 0xc0045878, 0x0) getsockopt$inet_IP_XFRM_POLICY(r56, 0x0, 0x11, &(0x7f0000002840)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast1}}, &(0x7f0000002940)=0xe8) r58 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r58, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r59 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r59, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r60, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r58, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r60}, {0x2, 0x1}], {}, [{0x8, 0x4, r61}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) getgroups(0x1, &(0x7f0000002980)=[r61]) r63 = gettid() ptrace(0x4206, r63) tkill(r63, 0x9) r64 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r65 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r65, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r64, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r66, r67}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) r68 = gettid() ptrace(0x4206, r68) tkill(r68, 0x9) r69 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r70 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r70, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r69, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r71, r72}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) getresgid(&(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)=0x0) r74 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r75 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r75, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r74, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r76, r77}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) r78 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r78, 0x40045612, &(0x7f0000000040)=0x5) r79 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000004180)='/proc/self/attr/exec\x00', 0x2, 0x0) r80 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/rfkill\x00', 0x201, 0x0) r81 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000004200)='/dev/video37\x00', 0x2, 0x0) r82 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r82, 0x40045612, &(0x7f0000000040)=0x5) r83 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r83, 0x40045612, &(0x7f0000000040)=0x5) r84 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r84, 0x40045612, &(0x7f0000000040)=0x5) r85 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r85, 0x40045612, &(0x7f0000000040)=0x5) r86 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r87 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r88 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r88, 0x40045612, &(0x7f0000000040)=0x5) r89 = gettid() ptrace(0x4206, r89) tkill(r89, 0x9) r90 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r91 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r91, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r90, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r92, r93}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) r94 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r94, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r95 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r95, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r96, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r94, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r96}, {0x2, 0x1}], {}, [{0x8, 0x4, r97}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r98 = getpgrp(0x0) r99 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r100 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r100, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r99, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r101, r102}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8) r103 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r103, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r104 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r104, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r105, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r103, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r105}, {0x2, 0x1}], {}, [{0x8, 0x4, r106}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r107 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r107, 0x40045612, &(0x7f0000000040)=0x5) r108 = syz_open_pts(r0, 0x0) r109 = socket$pppoe(0x18, 0x1, 0x0) r110 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r110, 0x40045612, &(0x7f0000000040)=0x5) r111 = syz_open_dev$evdev(&(0x7f0000006780)='/dev/input/event#\x00', 0x100000000, 0x800) r112 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r112, 0x40045612, &(0x7f0000000040)=0x5) r113 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r113, 0x40045612, &(0x7f0000000040)=0x5) r114 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r114, 0x40045612, &(0x7f0000000040)=0x5) r115 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r115, 0x40045612, &(0x7f0000000040)=0x5) r116 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r116, 0x40045612, &(0x7f0000000040)=0x5) r117 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r117, 0x40045612, &(0x7f0000000040)=0x5) r118 = syz_open_dev$dmmidi(&(0x7f00000067c0)='/dev/dmmidi#\x00', 0x4, 0x870381) r119 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r119, 0x40045612, &(0x7f0000000040)=0x5) r120 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r120, 0x40045612, &(0x7f0000000040)=0x5) r121 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r121, 0x40045612, &(0x7f0000000040)=0x5) r122 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r122, 0x40045612, &(0x7f0000000040)=0x5) r123 = openat$rtc(0xffffffffffffff9c, &(0x7f0000006800)='/dev/rtc0\x00', 0x40, 0x0) r124 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r124, 0x40045612, &(0x7f0000000040)=0x5) clone3(&(0x7f0000007940)={0x800, &(0x7f0000006840), &(0x7f0000006880), &(0x7f00000068c0)=0x0, 0x27, 0x0, &(0x7f0000006900)=""/13, 0xd, &(0x7f0000006940)=""/4096}, 0x40) r126 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r126, 0xc0045878, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r126, 0x29, 0x22, &(0x7f0000007980)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000007a80)=0xe8) r128 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r128, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r129 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r129, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r130, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r128, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r130}, {0x2, 0x1}], {}, [{0x8, 0x4, r131}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) getgroups(0x3, &(0x7f0000007ac0)=[r131, 0xee01, 0xffffffffffffffff]) fstat(r1, &(0x7f0000007b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r134 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r134, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r135 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r135, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r136, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r134, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r136}, {0x2, 0x1}], {}, [{0x8, 0x4, r137}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r138 = gettid() ptrace(0x4206, r138) tkill(r138, 0x9) stat(&(0x7f0000007b80)='./file0\x00', &(0x7f0000007bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r140 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r140, 0x40045612, &(0x7f0000000040)=0x5) r141 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r141, 0x40045612, &(0x7f0000000040)=0x5) r142 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r142, 0x40045612, &(0x7f0000000040)=0x5) r143 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r143, 0x40045612, &(0x7f0000000040)=0x5) r144 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r144, 0x40045612, &(0x7f0000000040)=0x5) r145 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r145, 0x40045612, &(0x7f0000000040)=0x5) r146 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r146, 0x40045612, &(0x7f0000000040)=0x5) r147 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r147, 0x40045612, &(0x7f0000000040)=0x5) r148 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r148, 0x40045612, &(0x7f0000000040)=0x5) r149 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r149, 0xc0045878, 0x0) ioctl$TIOCGPGRP(r149, 0x540f, &(0x7f0000008100)=0x0) getresuid(&(0x7f0000008140)=0x0, &(0x7f0000008180), &(0x7f00000081c0)) r152 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r152, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r153 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r153, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r154, 0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r152, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r154}, {0x2, 0x1}], {}, [{0x8, 0x4, r155}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) lstat(&(0x7f0000008200)='./file0\x00', &(0x7f0000008240)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 1137.297245][T25417] R10: 01000001ffffffff R11: 0000000000000246 R12: 00007fd9dcd486d4 [ 1137.305214][T25417] R13: 00000000004c7b67 R14: 00000000004dda90 R15: 0000000000000005 sendmmsg$unix(r5, &(0x7f0000008380)=[{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)="04bb0dad102a88e7796af5194aa1c2e6a0081a7f62af81fc17eceeda1bc4f00b33bc8eb63efc988df0eaf295240ef17442a4816b9d779bf45b74ca6f6665683e7a6c9daab7ab1be42501963c55381d2abfd253ede4c875420dcd7316bd1294ebccf5ad857abb2d4850063061e8b8288686e8737315e3974aa9ace0fb88227c6bc5db22b5bd913023db9a44ce9506dc6147cbd2a0b8b8d8ec8df0b9eaa0e67950419a1324c2159e266abb92bd15ad0efccbb91d48508b3c87302bd30c57c680e9c3e3983f005ff17424e906c6ffe1", 0xce}, {&(0x7f0000000440)="1dd043dd652412462b51a26e8596d951ac32cdf6d83dbc89d85dbae0c8b8983571d74d7cff8ebd12fffc9e95bfd89ada2e263b75d04f6fa09fd74b68b7ba9bb5ebe1598cd6d318bc0c3185589e0d45130cde8e821434d572dde12bbf3bcfbfad44bbc7e4f5148c85c5626c5f1c8def66f960458e2ed6dc4f4d5bd7a630a1f6ed7e95f6e309e2faad01f6b58ed04b0fc234e0bce790276cda2a42763d55ac79459fdac484692d97d64b", 0xa9}, {&(0x7f0000000500)="f9c04db29cec", 0x6}, {&(0x7f0000000540)="99a8f29a36146f36153db5f6d3311908346b42e2a745145704040fa3c165d5649166777fdf44a3765fb7fa6af94adb09f33f8608d52e59550fd3a55ae8da8e345623b6c34096a8e963736b56418258edb578b3642ea5dfd6e9b3ea246d0af59cdcbaa3d3aa6e3d79083a1b62a51605873ee8f736d92620258ad2f132e80055abccd623089be122bc1b96fa89af8b3a26fe51d1d2d9acba2545a35d88c9fa97a94c66a00970c31ca1fe004f0a2a1ae2f2b4861be2c59cda939037c768d4526638eab43bcb0869b940d1f550af13d04a19755c2dc3a1bcee32fea5b2fa2ca5216cf15b64a31b405651b6", 0xe9}, {&(0x7f0000000640)="b4426c698d3e58c9045e3b2e60df36d45519c01df71d81c8e18066f76d02f233088a0ceedef41dbc0a9c79d8758fa953a08adc35ed596cd91efd7d3181c4d76291a62e4ba69f33ea959d5638612baca8ef730608524345b669bde681dc96bc18cefebe257fffcf96bfc8b92554284f8d0bfe1389119012f733c3abbb37307ebdc525c3ce886aaa5dbd4a55b6ca4ad42f86682ba3ada8a48af3eed42f22568c0e7a398c9233fc02f714f3a8a3a5de7992c8afeb2b9a223ad798d98e63c8efc12ecba760bcbc9292f1acdf48b37b50ac81d820f320ae3e5f789ca66592", 0xdc}], 0x5, 0x0, 0x0, 0x8000}, {&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000840)="0973a9cdb3919353b97cf484ad6895", 0xf}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000880)="2bc196b0ee1bf05641c90ddd1d20036ee2545aa9cb3a15edb26ebdcab1561a3c438334e1bca62a81bb64ce0e45b761a1a10024b268ee7c97cfd5563aad1d72992bf2b853c543718c5406f081b845f8d9791239ac1b74b61f355a", 0x5a}, {&(0x7f0000000900)="d5c0922db54639fffe1d", 0xa}], 0x4, &(0x7f0000000c80)=[@rights={{0x34, 0x1, 0x1, [r1, r2, r0, r6, r0, r7, r8, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r14, r18}}}, @rights={{0x28, 0x1, 0x1, [r1, r19, r0, r20, r21, r1]}}, @rights={{0x20, 0x1, 0x1, [r22, r1, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r24, 0x0, r28}}}, @cred={{0x1c, 0x1, 0x2, {r3, r29, r33}}}, @cred={{0x1c, 0x1, 0x2, {r34, r35, r36}}}], 0x100, 0x20000000}, {&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001e40)="1c3a0766650310c7450dfa58f2796f18e831d9c75b29514b12a66f5433e8791a8f875aeae5a36c15921a1ec4a4b0f0e7ca6a88bb2d956bdeb044399623485e2c443e0a93288ee957960d941fa85cdf10e02e0f6ed27be4771a9fc29c3046fa8d6a1cdb5cd7070a0d9f67438f321cb05b2dd19b53d7a97df9d849d0978889f081a7e943e8426213ddfa2186c98d916d581f4b7fe957280d71b2e749198ff76cca7a8ab5f5d4c57dfce735d3867a73e4d037c86b5ffc1782eb40a4f3fbc89395c2cdb1e10f4dbbb7fe4f361b0c8d9400f00f2f4b13bcc970029c981c9c3ca92e8bf08ce875fb0f94e9", 0xe8}, {&(0x7f0000001f40)="bee2a7cf39afe1f48e77b2ae76c30c82229795429b5cbbc347841d9014401694c6657443088e813f1bed7bdccd72d08ee4f66c222dbe98f1f58f0b11341ef596abb853eabc05546f95a917d0d4da75", 0x4f}, {&(0x7f0000001fc0)="9dfda3a363c338c122eb071947d4d1aadce40dbb382e0ab9d0e0802d66e19e8e7380c9e053406c38f3c973930bb52de34334139c3454edcdd827dfd1b66e848b9194835e582b4b76ac2224dcf38870821e8ca161a11fe767e4bd1c06507810edb5e3c69d4bce1ad9632a7be1d8b1be96a2f5f584cba350e0c21b476963828f3e25aa8a5643ce5f39e30e9f4528559a97285c091d4f523127eac4911ed6978a7889f2d51ae2c99982fe0c5f95fd3bbf9b4c196a31eaa962fd097b0956422856cbe9c754bf887c0b4e6964ff0df879b35891ba4423c44c", 0xd6}, {&(0x7f00000020c0)="1e2e56af0df80918a06d83c3b4f4d67e0272916f2bf7aaffeaa20b2dff0ebcedf962a3376df78bd58ab95d1650e12e272c4306a08026603d332fc3a15dcc0c12e05767e235ac2eb2c50147c39e940dca97268d28bfd418fd8c69fbba1a9b968a3edc190360e9165d5ec39bf71f399139eeb9f9f07b12347c795eeee6", 0x7c}], 0x4, 0x0, 0x0, 0x40}, {&(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000002200)="3b532a9a6f216ccdc6c3f5acb9a096beda441aa375e20590305f115f287a58ebd0baaeadf3b4acee81d75bf197a608b6dde6e915c0dd2387a903f2603894933bc8bfb2a4a0251ce5e1122199cc20c190", 0x50}], 0x1, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r40}}}, @rights={{0x18, 0x1, 0x1, [r41, r42]}}, @cred={{0x1c, 0x1, 0x2, {r43, r47, r48}}}, @rights={{0x30, 0x1, 0x1, [r49, r1, r50, r51, r52, r53, r54, r55]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r57, r62}}}, @cred={{0x1c, 0x1, 0x2, {r63, r67, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r68, r72, r73}}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r77}}}], 0x140, 0x5c0f36c5f07c6200}, {&(0x7f0000002bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000002c40)="2fcadec04995bfab4b951aa51d844b1160739986", 0x14}, {&(0x7f0000002c80)="bb8ef03aab28995be60adf68ea69a778fac31daecac4df4c0b36882311bb9e", 0x1f}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="8b8975ce2a77a82feda329d896bc4c1706fcd0b7a6d40b432498b29c5839ea85ac135e92c5cca7e0ac9d0cc2bb07f21640ca0f5af9b2e3f5f9f29d35745a9d735394e1e4ba3f81a8c9570fd5383f4e6e05fbd514cfd012bed85559818f5c7441e58d65d7162c7392492089a1f5bd8e998644faa3dba3a974e75d7bf61f46cd23224dbe800ae5715666bcd17299ed75d7a4ae015bed6b65aef5aeed03b3130be198b0010b3e2474414dd214cbda94a0a6f074ac792a5bc3a9587a2d53dc63f1dd2bd964b9122854de7be44f2058fbd18f822aa19ba0c5d1ba8b7f4cb133ddfefaf1a768813c", 0xe5}, {&(0x7f0000003dc0)}, {&(0x7f0000003e00)="371948d6b770d38cbc6f20353b488bd7b95023f3bb6172c2a8fb79dcefd6f92323b9bacf1a65aa67148274d05aea76ee7224c55406602177f345ca5b28624536d15e47388cf82975c5cdf071747478da9b367991708f972180f6c28f0e96a69ed48f9b1c3c9d0b2b3c9f3ea32ab20432ee860d7de6ff4986114c0efabb475ef61acb961af369c5bdb69e03cdb2eb8f00267f04f81c4511cf5d8a227a975703ee8948c7763237cee01979697cb1aa262118f61ce66c965d8c66f2956b673528debd3d811e44075a0c52a620be5314edd390e65681", 0xd4}, {&(0x7f0000003f00)="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", 0xfa}, {&(0x7f0000004000)="04d26c31237f1ab208749d8ec84d74f00701459da87594f35016f11fb9eb1f4baf233c2a9c34c87b7268e1a5fd4a4e3f69a16a1ab79c4ac8116140607cae62df4e159c39c427db8e16843e84ea2326a2427e349d768e910b93354ee23fcee370aece7f00464e173206a50978f0f74219bf9a0cbe5fefea236560b4c8f283c4f6b5aa9e07702986434d2b2d4e8ec37bd08fd7a0baf575daf3631907e4a9c2a051420134dbd9532a4c98209f5af534b577e5512c275cc984a25807bc4f018dfed985a559", 0xc3}], 0x8, &(0x7f0000004240)=[@rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r78, r79, r4, r80, r81, r82]}}], 0x30, 0x800}, {&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000004300)="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", 0x1000}], 0x1, &(0x7f0000005340)=[@rights={{0x30, 0x1, 0x1, [r83, r84, r2, r85, r86, r87, r88, r4]}}, @cred={{0x1c, 0x1, 0x2, {r89, r93, r97}}}, @cred={{0x1c, 0x1, 0x2, {r98, r102, r106}}}, @rights={{0x24, 0x1, 0x1, [r107, 0xffffffffffffffff, r1, r108, r109]}}], 0x98, 0x44000}, {&(0x7f0000005400)=@abs={0x3, 0x0, 0x4e21}, 0x6e, &(0x7f0000006700)=[{&(0x7f0000005480)="2f26e37d77e1f76d1973776afd206be0146779ad7e6d466e754ddbf5", 0x1c}, {&(0x7f00000054c0)="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", 0x1000}, {&(0x7f00000064c0)="8267d74982b8c1bd80603ca19dc00eeec0e08b19aa9a9eba5507ebe0230d5f9b9ee9de", 0x23}, {&(0x7f0000006500)="13fa00bfb0ee73e7313bbe78da888f14cf4af3aec8c6a846d252eb93f7b81b1ba40d5e49994a5ef922715f11c061577f2f55acf673a1d35f7ed3cda2ad60ccc9944639f8fe128725a992efe3ded3a0ba1234a02856e59c580d68a65fd672c4a737c0395fccdc8bf1885933338860eafb095ed1345a03ac05b5087f9768213b1891d04e484e2b7c44e6f111d0b3b9cfc2e3aa1f3ec557ce9c84e91e9ab0ca4da76a1219907c149dd5c3d3ac62645b75cd56043afa6cbeef673f2745a2db11816188549174792d2efcdcaf0a1c3cea3ca04c19a25bee089ee216d00b50", 0xdc}, {&(0x7f0000006600)="fd1371e2e1399fbed7b8745b22f8c732c85b81948010e90d0e5d4b0ac65d435b7f32c6d12890741f8fcd275b3eaccc78b061bcf88daa0b0d809873eb4df4ca8f4982d0fdce2be12416945c0abce3d7cd3e314ea470f6a4e3186418074b9b6c00ce2b094d5cdc8edec3a0fe32db109b87f39a2892a970c536bdcee2936435c06559dc0832a791f90714c14218527bb347dae0c2ca747cfe6f567acfcef877f213f26a4318c6a03efce0ad1f9d5173934d6c9c218ee2fb6449490990a96308e0af2f9d843b610e13c3f104f155374041ee71139f0604673211", 0xd8}], 0x5, &(0x7f0000007c40)=[@rights={{0x1c, 0x1, 0x1, [r110, r111, r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, r112, r1]}}, @rights={{0x30, 0x1, 0x1, [r113, r4, r114, r2, r115, r116, r117, r0]}}, @rights={{0x20, 0x1, 0x1, [r118, r119, r120, r4]}}, @rights={{0x2c, 0x1, 0x1, [r1, r121, 0xffffffffffffffff, r122, r123, r0, r124]}}, @cred={{0x1c, 0x1, 0x2, {r125, r127, r132}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r133, r137}}}, @cred={{0x1c, 0x1, 0x2, {r138, r139, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r140, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r141, r142, r143]}}], 0x168, 0x20000010}, {&(0x7f0000007dc0)=@file={0xf4e5aa091fe64a08, './file0\x00'}, 0x6e, &(0x7f00000080c0)=[{&(0x7f0000007e40)="5cc6c8ea3dcadb4119f954e6ab10911a21904ae1614192", 0x17}, {&(0x7f0000007e80)="ce400aab9b44ffc3", 0x8}, {&(0x7f0000007ec0)="6dbd4b2218424d5561096e25a2190036d7fb5036f7cb593b74c396c29fbb10a5a7b89148235fe414055461c4eea7f7dd536396541f171a33ceec303471854cd5e0a0551ee36c906b3e2d2cf754b68b41bf6f30e13b3849610d4be8494f5d037a28abc0746a744bcc7a4eb9d28d8a8d22e3b6e79395b6c35ac3c4cba05bd88142c421a99876e2a99d12ffefdc479c706cc35ed04268cc96ad76737d6815297a84c42fc921d7c3c634d7d681caa606e6997eb9c99865ab10f609e2a162355d701aca8dc9b8905dc71c8954be8bec82bfb84c347d3a30c213575b7ab2945c", 0xdd}, {&(0x7f0000007fc0)="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", 0xfe}], 0x4, &(0x7f00000082c0)=[@rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r144, r145, r2, r146, r147, r148]}}, @cred={{0x1c, 0x1, 0x2, {r150, r151, r155}}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3, r156, 0xee00}}}], 0xa0}], 0x8, 0x40000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="fe541c69b690f98ea73a9f199b3cb2"], 0x1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x78198f6f571a5e83, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) ustat(0x1000000100000001, &(0x7f0000000000)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(0x0) [ 1137.482191][T19709] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1137.842057][T19709] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1137.851276][T19709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.860779][T19709] usb 3-1: config 0 descriptor?? [ 1138.112232][T19709] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1138.962876][T25414] ===================================================== [ 1138.969877][T25414] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0xa9/0xb0 [ 1138.977350][T25414] CPU: 0 PID: 25414 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0 [ 1138.985257][T25414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.995308][T25414] Call Trace: [ 1138.998613][T25414] dump_stack+0x191/0x1f0 [ 1139.002955][T25414] kmsan_report+0x128/0x220 [ 1139.007471][T25414] kmsan_internal_check_memory+0x187/0x4a0 [ 1139.013279][T25414] ? kmsan_get_metadata+0x39/0x350 [ 1139.018412][T25414] kmsan_copy_to_user+0xa9/0xb0 [ 1139.023268][T25414] _copy_to_user+0x16b/0x1f0 [ 1139.027876][T25414] fuzzer_ioctl+0x25a9/0x5860 [ 1139.032561][T25414] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1139.038646][T25414] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1139.044549][T25414] ? next_event+0x6a0/0x6a0 [ 1139.049057][T25414] full_proxy_unlocked_ioctl+0x222/0x330 [ 1139.054701][T25414] ? full_proxy_poll+0x2d0/0x2d0 [ 1139.059639][T25414] do_vfs_ioctl+0xea8/0x2c50 [ 1139.064245][T25414] ? security_file_ioctl+0x1bd/0x200 [ 1139.069547][T25414] __se_sys_ioctl+0x1da/0x270 [ 1139.074242][T25414] __x64_sys_ioctl+0x4a/0x70 [ 1139.078837][T25414] do_syscall_64+0xb6/0x160 [ 1139.083349][T25414] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1139.089243][T25414] RIP: 0033:0x459da7 [ 1139.093142][T25414] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1139.112747][T25414] RSP: 002b:00007fc17dfb43c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.121149][T25414] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459da7 [ 1139.129101][T25414] RDX: 00007fc17dfb4810 RSI: 0000000080085502 RDI: 0000000000000003 [ 1139.137055][T25414] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.145007][T25414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1139.152971][T25414] R13: 00000000004bf779 R14: 00000000004e1450 R15: 00000000ffffffff [ 1139.160943][T25414] [ 1139.163250][T25414] Uninit was stored to memory at: [ 1139.168266][T25414] kmsan_internal_chain_origin+0xbd/0x180 [ 1139.173985][T25414] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 1139.179959][T25414] kmsan_memcpy_metadata+0xb/0x10 [ 1139.184966][T25414] __msan_memcpy+0x56/0x70 [ 1139.189360][T25414] gadget_setup+0x498/0xb60 [ 1139.193846][T25414] dummy_timer+0x1fba/0x6770 [ 1139.198413][T25414] call_timer_fn+0x232/0x530 [ 1139.203037][T25414] __run_timers+0xd60/0x1270 [ 1139.207606][T25414] run_timer_softirq+0x2d/0x50 [ 1139.212363][T25414] __do_softirq+0x4a1/0x83a [ 1139.216854][T25414] irq_exit+0x230/0x280 [ 1139.220990][T25414] exiting_irq+0xe/0x10 [ 1139.225126][T25414] smp_apic_timer_interrupt+0x48/0x70 [ 1139.230522][T25414] apic_timer_interrupt+0x2e/0x40 [ 1139.235570][T25414] default_idle+0x53/0x90 [ 1139.239884][T25414] arch_cpu_idle+0x25/0x30 [ 1139.244282][T25414] do_idle+0x1d5/0x780 [ 1139.248357][T25414] cpu_startup_entry+0x45/0x50 [ 1139.253098][T25414] rest_init+0x1be/0x1f0 [ 1139.257327][T25414] arch_call_rest_init+0x13/0x15 [ 1139.262249][T25414] start_kernel+0x987/0xb57 [ 1139.266731][T25414] x86_64_start_reservations+0x18/0x2e [ 1139.272191][T25414] x86_64_start_kernel+0x81/0x84 [ 1139.277120][T25414] secondary_startup_64+0xa4/0xb0 [ 1139.282118][T25414] [ 1139.284434][T25414] Uninit was stored to memory at: [ 1139.289437][T25414] kmsan_internal_chain_origin+0xbd/0x180 [ 1139.295144][T25414] __msan_chain_origin+0x6b/0xd0 [ 1139.300061][T25414] dummy_timer+0x2d76/0x6770 [ 1139.304631][T25414] call_timer_fn+0x232/0x530 [ 1139.309209][T25414] __run_timers+0xd60/0x1270 [ 1139.313776][T25414] run_timer_softirq+0x2d/0x50 [ 1139.318534][T25414] __do_softirq+0x4a1/0x83a [ 1139.323041][T25414] irq_exit+0x230/0x280 [ 1139.327178][T25414] exiting_irq+0xe/0x10 [ 1139.331312][T25414] smp_apic_timer_interrupt+0x48/0x70 [ 1139.336667][T25414] apic_timer_interrupt+0x2e/0x40 [ 1139.341667][T25414] default_idle+0x53/0x90 [ 1139.345992][T25414] arch_cpu_idle+0x25/0x30 [ 1139.350389][T25414] do_idle+0x1d5/0x780 [ 1139.354480][T25414] cpu_startup_entry+0x45/0x50 [ 1139.359221][T25414] rest_init+0x1be/0x1f0 [ 1139.363702][T25414] arch_call_rest_init+0x13/0x15 [ 1139.368626][T25414] start_kernel+0x987/0xb57 [ 1139.373311][T25414] x86_64_start_reservations+0x18/0x2e [ 1139.378770][T25414] x86_64_start_kernel+0x81/0x84 [ 1139.383698][T25414] secondary_startup_64+0xa4/0xb0 [ 1139.388692][T25414] [ 1139.390997][T25414] Uninit was stored to memory at: [ 1139.396006][T25414] kmsan_internal_chain_origin+0xbd/0x180 [ 1139.401716][T25414] __msan_chain_origin+0x6b/0xd0 [ 1139.406727][T25414] usb_control_msg+0x61b/0x7f0 [ 1139.411499][T25414] usbnet_write_cmd+0x386/0x430 [ 1139.416393][T25414] asix_write_cmd+0x155/0x270 [ 1139.421051][T25414] ax88772_hw_reset+0x191/0xb40 [ 1139.425893][T25414] ax88772_bind+0x6ad/0x11f0 [ 1139.430461][T25414] usbnet_probe+0x10d3/0x39d0 [ 1139.435119][T25414] usb_probe_interface+0xd19/0x1310 [ 1139.440296][T25414] really_probe+0xd91/0x1f90 [ 1139.444865][T25414] driver_probe_device+0x1ba/0x510 [ 1139.449955][T25414] __device_attach_driver+0x5b8/0x790 [ 1139.455306][T25414] bus_for_each_drv+0x28e/0x3b0 [ 1139.460135][T25414] __device_attach+0x489/0x750 [ 1139.464883][T25414] device_initial_probe+0x4a/0x60 [ 1139.469883][T25414] bus_probe_device+0x131/0x390 [ 1139.474708][T25414] device_add+0x25b5/0x2df0 [ 1139.479193][T25414] usb_set_configuration+0x309f/0x3710 [ 1139.484634][T25414] generic_probe+0xe7/0x280 [ 1139.489114][T25414] usb_probe_device+0x146/0x200 [ 1139.493945][T25414] really_probe+0xd91/0x1f90 [ 1139.498521][T25414] driver_probe_device+0x1ba/0x510 [ 1139.503611][T25414] __device_attach_driver+0x5b8/0x790 [ 1139.508960][T25414] bus_for_each_drv+0x28e/0x3b0 [ 1139.513803][T25414] __device_attach+0x489/0x750 [ 1139.518554][T25414] device_initial_probe+0x4a/0x60 [ 1139.523553][T25414] bus_probe_device+0x131/0x390 [ 1139.528378][T25414] device_add+0x25b5/0x2df0 [ 1139.532868][T25414] usb_new_device+0x23e5/0x2fb0 [ 1139.537716][T25414] hub_event+0x581d/0x72f0 [ 1139.542131][T25414] process_one_work+0x1572/0x1ef0 [ 1139.547166][T25414] worker_thread+0x111b/0x2460 [ 1139.551915][T25414] kthread+0x4b5/0x4f0 [ 1139.555985][T25414] ret_from_fork+0x35/0x40 [ 1139.560373][T25414] [ 1139.562677][T25414] Uninit was stored to memory at: [ 1139.567683][T25414] kmsan_internal_chain_origin+0xbd/0x180 [ 1139.573385][T25414] __msan_chain_origin+0x6b/0xd0 [ 1139.578664][T25414] ax88772_bind+0xa12/0x11f0 [ 1139.583241][T25414] usbnet_probe+0x10d3/0x39d0 [ 1139.587908][T25414] usb_probe_interface+0xd19/0x1310 [ 1139.593135][T25414] really_probe+0xd91/0x1f90 [ 1139.597709][T25414] driver_probe_device+0x1ba/0x510 [ 1139.602796][T25414] __device_attach_driver+0x5b8/0x790 [ 1139.608148][T25414] bus_for_each_drv+0x28e/0x3b0 [ 1139.612977][T25414] __device_attach+0x489/0x750 [ 1139.617718][T25414] device_initial_probe+0x4a/0x60 [ 1139.622717][T25414] bus_probe_device+0x131/0x390 [ 1139.627556][T25414] device_add+0x25b5/0x2df0 [ 1139.632053][T25414] usb_set_configuration+0x309f/0x3710 [ 1139.637503][T25414] generic_probe+0xe7/0x280 [ 1139.642001][T25414] usb_probe_device+0x146/0x200 [ 1139.646840][T25414] really_probe+0xd91/0x1f90 [ 1139.651406][T25414] driver_probe_device+0x1ba/0x510 [ 1139.656495][T25414] __device_attach_driver+0x5b8/0x790 [ 1139.661855][T25414] bus_for_each_drv+0x28e/0x3b0 [ 1139.666744][T25414] __device_attach+0x489/0x750 [ 1139.671484][T25414] device_initial_probe+0x4a/0x60 [ 1139.676485][T25414] bus_probe_device+0x131/0x390 [ 1139.681310][T25414] device_add+0x25b5/0x2df0 [ 1139.685791][T25414] usb_new_device+0x23e5/0x2fb0 [ 1139.690616][T25414] hub_event+0x581d/0x72f0 [ 1139.695017][T25414] process_one_work+0x1572/0x1ef0 [ 1139.700031][T25414] worker_thread+0x111b/0x2460 [ 1139.704770][T25414] kthread+0x4b5/0x4f0 [ 1139.708816][T25414] ret_from_fork+0x35/0x40 [ 1139.713203][T25414] [ 1139.715509][T25414] Local variable description: ----buf.i@asix_get_phy_addr [ 1139.722587][T25414] Variable was created at: [ 1139.726980][T25414] asix_get_phy_addr+0x4d/0x280 [ 1139.731814][T25414] asix_get_phy_addr+0x4d/0x280 [ 1139.736642][T25414] [ 1139.738948][T25414] Byte 10 of 16 is uninitialized [ 1139.743862][T25414] Memory access of size 16 starts at ffff88801894fae0 [ 1139.750595][T25414] Data copied to user address 00007fc17dfb4810 [ 1139.756830][T25414] ===================================================== [ 1139.763744][T25414] Disabling lock debugging due to kernel taint [ 1139.769871][T25414] Kernel panic - not syncing: panic_on_warn set ... [ 1139.776437][T25414] CPU: 0 PID: 25414 Comm: syz-executor.2 Tainted: G B 5.4.0-rc3+ #0 [ 1139.785688][T25414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.795720][T25414] Call Trace: [ 1139.798993][T25414] dump_stack+0x191/0x1f0 [ 1139.803304][T25414] panic+0x3c9/0xc1e [ 1139.807205][T25414] kmsan_report+0x215/0x220 [ 1139.811720][T25414] kmsan_internal_check_memory+0x187/0x4a0 [ 1139.817519][T25414] ? kmsan_get_metadata+0x39/0x350 [ 1139.822626][T25414] kmsan_copy_to_user+0xa9/0xb0 [ 1139.827467][T25414] _copy_to_user+0x16b/0x1f0 [ 1139.832069][T25414] fuzzer_ioctl+0x25a9/0x5860 [ 1139.836740][T25414] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1139.842793][T25414] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1139.848677][T25414] ? next_event+0x6a0/0x6a0 [ 1139.853178][T25414] full_proxy_unlocked_ioctl+0x222/0x330 [ 1139.858798][T25414] ? full_proxy_poll+0x2d0/0x2d0 [ 1139.863720][T25414] do_vfs_ioctl+0xea8/0x2c50 [ 1139.868297][T25414] ? security_file_ioctl+0x1bd/0x200 [ 1139.873565][T25414] __se_sys_ioctl+0x1da/0x270 [ 1139.878225][T25414] __x64_sys_ioctl+0x4a/0x70 [ 1139.882794][T25414] do_syscall_64+0xb6/0x160 [ 1139.887276][T25414] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1139.893225][T25414] RIP: 0033:0x459da7 [ 1139.897116][T25414] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1139.916704][T25414] RSP: 002b:00007fc17dfb43c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.925189][T25414] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459da7 [ 1139.933158][T25414] RDX: 00007fc17dfb4810 RSI: 0000000080085502 RDI: 0000000000000003 [ 1139.941140][T25414] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.949122][T25414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1139.957090][T25414] R13: 00000000004bf779 R14: 00000000004e1450 R15: 00000000ffffffff [ 1139.966765][T25414] Kernel Offset: disabled [ 1139.971092][T25414] Rebooting in 86400 seconds..