Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Permit User Sessions. [ OK ] Started Getty on tty1. [ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [** ] (2 of 2) A start job is running for…ot available (1min 25s / no limit) [* ] (1 of 2) A start job is running for…Shell server (1min 26s / 2min 44s) [** ] (1 of 2) A start job is running for…Shell server (1min 27s / 2min 44s) [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 2020/08/10 08:54:37 fuzzer started 2020/08/10 08:54:38 dialing manager at 10.128.0.26:41989 2020/08/10 08:54:38 syscalls: 3255 2020/08/10 08:54:38 code coverage: enabled 2020/08/10 08:54:38 comparison tracing: enabled 2020/08/10 08:54:38 extra coverage: enabled 2020/08/10 08:54:38 setuid sandbox: enabled 2020/08/10 08:54:38 namespace sandbox: enabled 2020/08/10 08:54:38 Android sandbox: enabled 2020/08/10 08:54:38 fault injection: enabled 2020/08/10 08:54:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/10 08:54:38 net packet injection: enabled 2020/08/10 08:54:38 net device setup: enabled 2020/08/10 08:54:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/10 08:54:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/10 08:54:38 USB emulation: enabled 2020/08/10 08:54:38 hci packet injection: enabled 08:57:11 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 317.601049][ T29] audit: type=1400 audit(1597049831.810:8): avc: denied { execmem } for pid=8484 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 317.958503][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 318.299561][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 318.423827][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.431231][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.440948][ T8485] device bridge_slave_0 entered promiscuous mode [ 318.454873][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.462289][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.471924][ T8485] device bridge_slave_1 entered promiscuous mode [ 318.520923][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.537826][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.586546][ T8485] team0: Port device team_slave_0 added [ 318.600411][ T8485] team0: Port device team_slave_1 added [ 318.643218][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.650308][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.676433][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.693563][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.700632][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.726809][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.791191][ T8485] device hsr_slave_0 entered promiscuous mode [ 318.800726][ T8485] device hsr_slave_1 entered promiscuous mode [ 319.094922][ T8485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.124875][ T8485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.164351][ T8485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.184700][ T8485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.502670][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.535240][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.544552][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.566682][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.590404][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.600546][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.611139][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.618505][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.674880][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.684375][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.694193][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.703747][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.710975][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.720072][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.730951][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.747261][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.758005][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.769887][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.793225][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.803821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.835242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.845412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.878020][ T8485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.891435][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.905710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.915963][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.977831][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.986008][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.016411][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.079944][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.090516][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.153554][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.163393][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.187686][ T8485] device veth0_vlan entered promiscuous mode [ 320.198445][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.208069][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.246590][ T8485] device veth1_vlan entered promiscuous mode [ 320.325202][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.334942][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.344403][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.354374][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.376808][ T8485] device veth0_macvtap entered promiscuous mode [ 320.398604][ T8485] device veth1_macvtap entered promiscuous mode [ 320.468560][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.477132][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.486701][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.496755][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.521651][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.530644][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.541104][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:57:17 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) r2 = dup(r0) getrandom(&(0x7f0000000180)=""/4122, 0xe8f, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) 08:57:17 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f0000000100), 0x4) 08:57:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x10) 08:57:17 executing program 0: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000000)={r2}, 0x8) 08:57:18 executing program 0: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="8202ad4fac"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000100)={r4, 0x0, 0x0, 0x132c}, 0x14) [ 323.873032][ T5] Bluetooth: hci0: command 0x0409 tx timeout 08:57:18 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000004c0)={0x2, 0x4bd6c548, 0x80000001, 0x0, 0x3634}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x90, r6, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0xfffffffa}, {0x5, 0x14, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040050}, 0x41) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200097ac40076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}]}, 0x30}}, 0x0) r8 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r7], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 324.295693][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.309860][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.338063][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:18 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e00000010008108040f80ecdb4cb9460a480e0a10000000e3bd6efb250009000e00030040fe00ff050005001201", 0x2e}], 0x1}, 0x0) [ 324.709373][ T8743] @þ: renamed from team0 [ 324.724953][ T8743] 8021q: adding VLAN 0 to HW filter on device @þ [ 324.974311][ T8743] 8021q: adding VLAN 0 to HW filter on device @þ 08:57:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e00000010008108040f80ecdb4cb9460a480e0a10000000e3bd6efb250009000e00030040fe00ff050005001201", 0x2e}], 0x1}, 0x0) [ 325.347385][ T8748] 8021q: adding VLAN 0 to HW filter on device @þ 08:57:19 executing program 0: unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180), 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1412, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 325.616502][ T8752] IPVS: ftp: loaded support on port[0] = 21 [ 325.964825][ T3227] Bluetooth: hci0: command 0x041b tx timeout [ 326.284662][ T8752] IPVS: ftp: loaded support on port[0] = 21 [ 326.403344][ T1573] tipc: TX() has been purged, node left! [ 326.927492][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.937127][ T8797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8797 comm=syz-executor.0 08:57:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}}, 0x24}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000280)={0x0, 0xfffffffffffffffc}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@mcast2, @ipv4={[], [], @local}, @local, 0xffff0001, 0xfe01, 0xcc6, 0x100, 0x5, 0x40004, r6}) fspick(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) [ 327.757703][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.811593][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}}, 0x24}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000280)={0x0, 0xfffffffffffffffc}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@mcast2, @ipv4={[], [], @local}, @local, 0xffff0001, 0xfe01, 0xcc6, 0x100, 0x5, 0x40004, r6}) fspick(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) [ 327.902763][ T8694] tipc: TX() has been purged, node left! [ 328.035769][ T28] Bluetooth: hci0: command 0x040f tx timeout [ 328.195524][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') socket$l2tp6(0xa, 0x2, 0x73) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000480)={0x8000, 0x4, 0x100, 0x1, 0xfffffffa}) signalfd4(r2, &(0x7f0000000140)={[0x40, 0x7]}, 0x8, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r7, 0x1, 0x0, 0x0, {0x26}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xa4, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044021}, 0x8004) [ 328.665904][ T8816] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 328.682800][ T8816] device batadv0 entered promiscuous mode [ 328.743104][ T8813] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:57:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x80, 0x4) openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) 08:57:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x23, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074610000000000000000000000000000000000000000001a00"/116], 0x8c}}, 0x0) 08:57:23 executing program 1: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x0, 0x4, 0x2}) ioctl$RTC_WIE_ON(r1, 0x700f) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x2f, 0x5, 0x81, 0x7, 0x46, @dev={0xfe, 0x80, [], 0x12}, @mcast2, 0x7414bd4ce9ceeab8, 0x1, 0x4, 0x610}}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={r2, 0x5, 0x40, 0x8001}) r7 = accept4(r6, 0x0, &(0x7f0000000200), 0x800) r8 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000280)=0x7) r9 = semget(0x2, 0x1, 0x420) semctl$GETVAL(r9, 0x4, 0xc, &(0x7f00000002c0)=""/108) r10 = openat$hwrng(0xffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r10, 0xc0045405, &(0x7f0000000380)=0x56) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r11, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8050) socketpair(0x18, 0xa, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', r5, 0x6, 0xfd, 0x0, 0x9, 0x18, @mcast1, @private1, 0x8000, 0x7, 0x9f3, 0x6}}) 08:57:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@private, @multicast1}, &(0x7f0000000100)=0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r4, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x3c4, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c3ea902f115dcdb055a7eced54b682bbcaea7ec3fd71b8431bace1ab5cfb3819194b"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c469e0c97d1826c932153c4aa1be8dcaa47f49c16c4b55b12765bc3ad2a3aea941"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "6e72235cf60d741d6f7652a3bab8d4fa8e6730714af3cec64a2635cc5bd53965df81"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2c3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "231820c07a4fea365b6958b8d06c35f3fde8093aba5b6c73648a492b1a0cf18e0313"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "58c5d4769d4911d75e525d221d0afcf09c5b919143d010"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8df1fa2a3f1b2b9d985f0cac78999202a9fff8bcf374c97d41254c0af1"}}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "308be6427df136658152391b49b85a5ee38564a0062afe5b3d0ec0524fc488e56b64c9bbc9fcc60b14a8da96c0729289237b9330f2edfd19c47b3e0baac4e6db62ddf3393543a6b2329374ef5a04f725fd2d6897e08a68a4e87a24064c6d549e08ba315d791f0c287384c6ee49c1a01b8b1fd602238ae2ad8c95b948657e912132379a50b3e20a9469dbfe6c6d52e806764bb91f580a181a4aa121a651"}, @TIPC_NLA_NODE_ID={0x42, 0x3, "a6027e8065af0c935206290b98bf80d842e83958fd9c48171964b9a247b14aea9021a97c886e3f90a802d0f397191e742890b37c9cd737a9d10b86aa01e7"}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c8c000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0xc5}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x1}]}}]}, 0x38}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 329.907054][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.982882][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.114122][ T28] Bluetooth: hci0: command 0x0419 tx timeout [ 330.151938][ T8850] IPVS: ftp: loaded support on port[0] = 21 08:57:24 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2302, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) 08:57:24 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4c002, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x4, 0x3}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000000)) shmctl$SHM_LOCK(r2, 0xb) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/211, 0xd3) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/166) read(r0, &(0x7f0000000300)=""/129, 0x81) 08:57:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0x80000001) syz_emit_ethernet(0x1da, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000030a00000000000000002202131267dac79ed4aecc78ed658a9f35a6e17c080a00000000000000001e0c09000000000000000000080a00002000000000010000"], 0x0) [ 330.770590][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 330.988496][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.995926][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.005605][ T8850] device bridge_slave_0 entered promiscuous mode [ 331.018902][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.027031][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.037221][ T8850] device bridge_slave_1 entered promiscuous mode [ 331.086075][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.103470][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.157751][ T8850] team0: Port device team_slave_0 added [ 331.173422][ T8850] team0: Port device team_slave_1 added 08:57:25 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x0, 0x0, 0x6}}, 0x14) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x324]}, &(0x7f0000000100)=0x54) [ 331.238113][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.245321][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.271702][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.319595][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.327128][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.353478][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.439613][ T9020] IPVS: ftp: loaded support on port[0] = 21 [ 331.562408][ T8850] device hsr_slave_0 entered promiscuous mode [ 331.596582][ T8850] device hsr_slave_1 entered promiscuous mode [ 331.615983][ T8850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.623654][ T8850] Cannot create hsr debugfs directory [ 332.066300][ T8850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.090250][ T8850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.143386][ T8850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.199372][ T8850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.680991][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.715705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.724981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.747605][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 08:57:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004884, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000000)=""/35, 0xffffffffffffff13, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r5, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000014}, 0x40000) [ 332.791440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.802784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.812621][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.820041][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.885331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.894652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.904459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.913688][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.921240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.019674][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.030751][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.041709][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.046214][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 333.052263][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.073564][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.084092][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.113104][ T748] tipc: TX() has been purged, node left! [ 333.178094][ T8850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.188847][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.291564][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.301478][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.311241][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.321819][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.331983][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.445161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.546040][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.553792][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.693500][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.848996][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.859150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.007047][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.016854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.046639][ T8850] device veth0_vlan entered promiscuous mode [ 334.055664][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.064689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.141147][ T8850] device veth1_vlan entered promiscuous mode 08:57:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0), 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), 0x8) socket(0x0, 0x800000003, 0xfffffffc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) set_mempolicy(0x4000, &(0x7f0000000140)=0x407, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 334.296064][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.305863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.386122][ T8850] device veth0_macvtap entered promiscuous mode [ 334.398664][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.408609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.485097][ T8850] device veth1_macvtap entered promiscuous mode [ 334.505373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.516533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.560811][ T9111] IPVS: ftp: loaded support on port[0] = 21 [ 334.805518][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.816206][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.830207][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.848101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.858399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.046528][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.058103][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.072052][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.080824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.092226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:57:29 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000000380)="89c53548ab89ec4572f7a88b9bca6d751c35b224957b5f7a8b486b9d0b0bd6cb5afa6be2d0e8b186b44de7f4ff2f5a6b1bee750e4bd3a30a87b4bb949ee2af058d2bb9b98528f599c113699ae02f6e7c5c1d525df581f1492d10567f855a01f74ee4febbeca1866a8b30221e4f13f5e53eb9df80c459259b544c545e130121cff9f0959af93896b77cb1cb8ea9f1e86145710d89a3a8ff891d105747f341e9f12a28ab4531f2d7b708bda707c6b64d52d1", 0xb1}, {&(0x7f00000006c0)="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", 0x170}, {&(0x7f0000000600)="c821db9400d905d3da3193abfceaddff311d9b2ab2065bd1696d5b2580dde576a04933ac43b2a07cf98bcaaa7e606328e38b9669e0fc34dea79f35977df68856ebab9770b8017cd787a4ba0676b3b6fafeb0e5fa50dc353fd3f6b324805e7b6b887ca55b7b2bc6f8e45646bc60949e7303de15847cceb11e2b1106ea6c83b4a62798c2662b5eb492e0763b80a9", 0x8d}], 0x4) writev(r0, 0x0, 0x0) [ 335.468173][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.661004][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x60200) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x68}}, 0x0) 08:57:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000077f65f7f04917e1a87962553bc2c81000000c90738e78b44668e5933c9eac01c0570ec23555057a5f6a6b7b12b1d517f3bfd79f2336318965aa26cff677ee2884722303805b1c98e5a2257ff1ec18698ef39eba4b31cad3a2c4a3e1650f34aa89926d29a504ec2404797a99f674dd43b8f09abbc374d82d6f32a53a607e189745d8c9cdb4a368e7f19dd9bac5e680a243e3caac010c5585cd10f5c9ff44ad22f9d2a8710dacc37904e51130db8402c13abccc12ce20d8d2dbffcead3ddc5dd634d43e46b1139675b31c8b59a6b230070725f925543faa9a6cf49d1ab0c5299d20b5af06e270a4b59bc6282777253c74df755220cf6200d76ee4648060fbafe526e649e1b", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800800280000000000"], 0x3c}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffc, 0x101400) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x4, 0x6, 0x0, 0x4, 'syz1\x00', 0x3b0}) [ 336.210206][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.238445][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:30 executing program 0: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@loccookie='loccookie'}, {@localcaching='localcaching'}, {@errors_withdraw='errors=withdraw'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000040)={0x7, 0x3, [0x5, 0x7fff, 0xf144, 0x8000, 0x1ff], 0x7}) [ 336.445585][ T9158] gfs2: not a GFS2 filesystem 08:57:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x1e, {0x1e, 0x0, "dfe16e4ffb6176ee4f9044dba393cd91559a29fd4234f5c7abc15c1a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000400004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000400004cb]}) prctl$PR_SVE_SET_VL(0x32, 0x72f8) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f00000000c0)) 08:57:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x62, @broadcast, 0x4e24, 0x4, 'nq\x00', 0x20, 0x6, 0x1a}, 0x2c) r1 = memfd_create(&(0x7f0000000240)='\x00\x00\x1b\x00\x00\xb0\xe8t%\xfc}B\x99\xea\x8a\x1dB\b\x1cs\x89\xe7n\xa0\x88@\xf4\xdc\xb0\xc8\xd5\xea\xa2f\xa9\xaf\xde\xe6b\xc8\xeap\xe82T\x8b|eZ\xb2\x83\xa93a\x16Hn\xdf\xcb\xc4\xa1\x8a*\xb1\x02\x19\xb5\x93\x04\a\x1a\xd1\xa1-n\xd4\x8f\xf8\x01\xcas!\xe83\xcb=\xce\xd6\v9c\xbd\xc3\xbd\v\x1bt\xb5\xa2\xf7\b\xa61\xfcR\x87_/\xe4\xca4\xf2\xfd\xe2=\x9b\xcd\xcb\xe9b\xc9REfw\x7f\xca\xa9!\xdbt#\x82g', 0x3) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x7bd) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 337.562775][ T9182] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/4' not defined. [ 337.686077][ T9144] usb 1-1: new high-speed USB device number 2 using dummy_hcd 08:57:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r8, 0x2f, 0x0, 0xac, 0x4, 0x4, @ipv4={[], [], @broadcast}, @private1, 0x720, 0x10, 0x1, 0x40}}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8c0000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x19}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) [ 337.965952][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.008052][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.046974][ T9144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.058389][ T9144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.068476][ T9144] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 338.077912][ T9144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.109189][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.160412][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.188086][ T9144] usb 1-1: config 0 descriptor?? 08:57:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507003734000000c40000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r10, r9, r10}, &(0x7f0000000280)=""/250, 0xfa, &(0x7f0000000180)={&(0x7f0000000000)={'crc32-generic\x00'}, &(0x7f0000000040)='h', 0x1}) keyctl$setperm(0x5, r10, 0x1) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x392}]}, 0x34}}, 0x0) [ 338.525988][ T9144] usbhid 1-1:0.0: can't add hid device: -71 [ 338.532342][ T9144] usbhid: probe of 1-1:0.0 failed with error -71 [ 338.575463][ T9144] usb 1-1: USB disconnect, device number 2 [ 338.638342][ T9210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.668271][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.678990][ T28] Bluetooth: hci1: command 0x0409 tx timeout 08:57:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x505, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x45) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000400004cb]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 339.020958][ T9217] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 339.037864][ T9144] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 339.075743][ T9219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9219 comm=syz-executor.1 [ 339.417437][ T9144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.428935][ T9144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.439234][ T9144] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 339.448488][ T9144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.559260][ T9144] usb 1-1: config 0 descriptor?? [ 339.602810][ T9219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9219 comm=syz-executor.1 08:57:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x505, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x45) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000400004cb]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 340.040181][ T9144] pyra 0003:1E7D:2C24.0001: unknown main item tag 0xe [ 340.086602][ T9144] pyra 0003:1E7D:2C24.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 340.141153][ T9240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9240 comm=syz-executor.1 [ 340.361313][ T5] usb 1-1: USB disconnect, device number 3 [ 340.551598][ T9240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.560210][ T9144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.568264][ T9144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.756940][ T5] Bluetooth: hci1: command 0x041b tx timeout 08:57:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0)={0x0, 0x6}, 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), 0x8) socket(0x0, 0x800000003, 0xfffffffc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x407, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 341.305814][ T9277] IPVS: ftp: loaded support on port[0] = 21 [ 341.360920][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd 08:57:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800e3ff0f0005070000000000f04df7a0e67479", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) mmap(&(0x7f0000815000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, r0, 0x17aa3000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f00000000c0)) [ 341.966093][ T5] usb 1-1: device descriptor read/all, error -71 08:57:36 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$CHAR_RAW_HDIO_GETGEO(r5, 0x301, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001a31a31bbfe3569df3821c60076657468a14f79f65e7fb3c4252b2802be44c81f139ba36ba92a98607aef8887935e5cf9c728c23ca62520233e8bd8993ca9289f147dfd42426436f26eaf885d532325e958920288088ac265c406cac872d37ec16d3b5211fb536fd994e0bfa9f896a3b70c0118b05ba89930a56f34cb9db9d0a803e827e50d669ca9cbaaeeeb32cfb08f0000deff00000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) 08:57:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800e3ff0f0005070000000000f04df7a0e67479", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) mmap(&(0x7f0000815000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, r0, 0x17aa3000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f00000000c0)) [ 342.259262][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.328971][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:57:36 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000400)=0x200, 0x7fffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket(0x28, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x38}}, 0x4000000) r6 = openat$ipvs(0xffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="427c4058da3fb9955e3c18c84bc6adb6c21b761f54a930879c7f615abc361e9775e37823b303319a6efcf3a650b8d31760", @ANYRES16=0x0, @ANYBLOB="020025bd7000fedbdf250100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r7 = openat$autofs(0xffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) sendmsg$qrtr(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x2a, 0x1, 0x1}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000002c0)="9f83174faf5e4238974855faf714167ee41b7df47159a18b9ac2d4ed3c2bbb52da4bef0725baa9d6accb531083639e9635a03db7eeaeff3ac6bd325e4b0d73994ad49db8e24fe65b646afd844cfeaad7c9c2eb2e5bda2d8d4477e0913f1480a1b149b649e3e97fc8666ba2741226461eeca3ba7d86ff906992d60e317229c60bc39fe2a259106ebe24fa5623e4c1f06b7bf4074663ba3c5d1e444142f9c1", 0x9e}, {&(0x7f0000000600)="7101b9f6cc3e455adaee4d4ccc71b399ae53c79d0a7249f9dcd5547385663be19ee3d5f7e6e6d2d52fcd1deee204bbbf1891b8eb650cc50a9bed44571195f31e00b5203c9f2b387ab285b70593515cf0a0bc177bd43c735c60aa8399cfb70606beb80f5439e8e5f6b383079fe0d062594bf2483c66ebe6bdc775f426525b40e0d972fc2d9680abf528d08624b6be1e5d9462630050dbc58607b21591e2155f2c2c7946fda3d136759498b7ba6e6ba81d03dad8e5a670c27bb32906fffa2f93856bfa1efd34e2", 0xc6}], 0x2, &(0x7f0000000700)=[{0x5c, 0x10a, 0x7ff, "cc1863c2fbb82b0d22d7df3a321f18874fa5b301f5dfa36b43fdbe12e6353f15c0304cf512f691dfb360261467e6c7a9fac71fb61a31c02b79b2851b2ff511983b138f74054f21747b79c7e03c"}, {0xc, 0x10e, 0x3}, {0x90, 0x1, 0x3f, "0f22f00e779969c3c6d5373289d68eaa97768716a9534fdfedacdcc638745d3e94ab2b5e7356cb4334e19f033f4173f8acbc2a60096f21fe9a503dabbfc9572ff6a282dacd10fb186e5f85836d786ca6ab95cc2967feba5cd62d447c11bab65b9331355e3c16f3769a654360c1cb08c122ad01ab3f09b40995930f7d0d0a2b345389"}], 0xf8, 0x4000001}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000b43b39017f2c6e36082f3e1b8c5d0000004000"/34, @ANYRES32=r4, @ANYBLOB="00000c0000000000040000000b000100666c6f77657200000c0002000600080000000000"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 08:57:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x85}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$SNAPSHOT_FREE(r1, 0x3305) [ 342.768305][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.836828][ T9144] Bluetooth: hci1: command 0x040f tx timeout [ 342.862322][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:37 executing program 1: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000040)={0xa00000, 0x9, 0x4b, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a60, 0x3d, [], @value64=0x100}}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/124) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x8, 0x900) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4b, 0x4a}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r7, @ANYBLOB="0000000019000100636273001c000200180001"], 0x48}}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x6, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x5, 0x1, "a5"}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r10, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 08:57:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001240)={0x8f, 0x2638915b, 0x0, 0x0, 0x3ff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) r8 = syz_io_uring_complete(0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001200)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, &(0x7f0000000100)=0x8) [ 343.214033][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.224883][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.247665][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.257607][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:57:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x1, 0x5, 0x64, @dev={0xfe, 0x80, [], 0x3a}, @mcast1, 0x7800, 0x10, 0xfffffe24, 0x7}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xe0, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0xc0, 0x12, 0x0, 0x1, @ip6vti={{0xb, 0x1, 'ip6vti\x00'}, {0xb0, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @empty}, @IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @IFLA_VTI_REMOTE={0x14, 0x5, @mcast2}, @IFLA_VTI_LOCAL={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x9}, @IFLA_VTI_LINK={0x8, 0x1, r5}, @IFLA_VTI_LINK={0x8, 0x1, r9}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8000}], @IFLA_VTI_LOCAL={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}]}}}]}, 0xe0}}, 0x40000) [ 343.386917][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 343.459962][ T9339] sctp: [Deprecated]: syz-executor.0 (pid 9339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.459962][ T9339] Use struct sctp_sack_info instead [ 343.529016][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 343.567565][ T9345] sctp: [Deprecated]: syz-executor.0 (pid 9345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.567565][ T9345] Use struct sctp_sack_info instead 08:57:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0205649, &(0x7f0000000240)={0xf010002, 0x0, {0x700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x9, "01dbe421a20b68900215654306b1"}, 0x10, 0x1) 08:57:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 08:57:38 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000e80)='./file1\x00', &(0x7f0000000ec0)='9p\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0]) 08:57:38 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@remote, @multicast1}, &(0x7f00000000c0)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_QHIGH_WATERMARK={0x8}]}}}]}, 0x3c}}, 0x0) [ 344.336818][ T9380] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 08:57:38 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000e80)='./file1\x00', &(0x7f0000000ec0)='9p\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0]) 08:57:38 executing program 0: socket$inet(0x2, 0xa, 0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000003000010000000000000000eeab7000004c0001004800010008000100627066003800028006000300020000001800020000000000000000000000000000000000000000001400040064000000000400000000000000000000040006000000070000000000000000d0e22d14ff10bcf82b3d382b27c0000400"], 0x60}}, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x103440, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1, 0x12) [ 344.672574][ T9387] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 08:57:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x4e22, @private=0xa010101}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 08:57:39 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000000200), 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/88, 0x58}, {&(0x7f0000000740)=""/85, 0x55}, {&(0x7f0000000840)=""/173, 0xad}], 0x6, &(0x7f0000002f00)=""/257, 0x101}}, {{&(0x7f0000000a80)=@sco, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b00)=""/66, 0x42}, {0x0, 0x2}, {0x0}, {&(0x7f0000000e00)=""/230, 0xe6}, {&(0x7f0000000f00)=""/93, 0x5d}], 0x5, &(0x7f0000001000)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x3, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[], 0xfffffd6d) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) set_mempolicy(0x2, &(0x7f0000000040)=0x499, 0x65ec) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000100)=""/138) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f00000001c0)=0x8, 0x4) [ 344.917715][ T9144] Bluetooth: hci1: command 0x0419 tx timeout [ 345.223433][ T9395] : renamed from syzkaller1 08:57:39 executing program 0: getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x7f, 0x1, 0x3a32}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="ff0f3000d3c407d8f1fd3bdbc7853b518c1bec39ffea1d9f4ec430ac4f528f33e122240540e800d129ab3812b16db87b79855cf34ec595fb8d5f8bfabc6a33cba60df56f0e73dba44516339b00b5eb59c44de3a829f8cc95d68e818ee5d66dadb6610009c7cb212bde65d2f28388feb5328b42b549f00cf10a1492c7b4247f239c5db933040330e287ad75f72dde50b2b923bb639f95f565cc731601d4fdd53cb861106792d76f5d2de328818a93d134cc997799546efc223bdc516a0b84e902fba499b8221d1e2af2238e5502c24b877c80ed1c0af3f44afe417e87ff0bf39dbd7f03cf85e641414c5a7177bcda2587e5c39610"], 0x38) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000040)={0x9fc, 0x2e2cd690}) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) getsockopt(r3, 0x5, 0x1, &(0x7f0000000440)=""/140, &(0x7f00000000c0)=0x8c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="0100000000001c534872a1da9903cc74131328a10000ff00310000000800010006000000"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="780000000b0603000000000000000000000000005c000780050007002f00000008000840000000000a0011000400aaaaaa2200000900130073797a30000000000a001100aaaaaaaaaabb00000a001100aaaaaa1367aaaaaa00000900120073797a30008719570000000c00168008000140ac1e810105000100079bd436cc1746d9f4c225c14ad9000000"], 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000300)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$binfmt_elf32(r6, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c4606060901090000000000000002000600000000b600000006000000ff00200001000400ff0302000000000033c05d6b230985d602217115c366f4ef9e213d746a76fc8ea03b90ac46a80be861fc5c76f85cf53ffea9bd216cce2fefd1cbba0e6418996226bd7862d1d27562852dbdcf1887da70c391a837013148a5a5e6f75977d236e0542e1c29ac74477810a5a6bcf365ddf0bc66e3c56820f69a79350e867a470f92c254060d28b699ac652e2287c814c40ae4c449ffe6a2761d7057393d9cf543cdc13fe400"/215], 0x72) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x54, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x206, 0x10000}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x54}}, 0x0) 08:57:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d1a, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000300)={0x0, 0xb84a, 0x4, 0x4, 0x8000}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 08:57:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') socket$l2tp6(0xa, 0x2, 0x73) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) signalfd4(r2, &(0x7f0000000140)={[0x40, 0x7]}, 0x8, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0x10004}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}]}, @IFLA_ADDRESS={0x31, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0xc0) r6 = openat$audio1(0xffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x8c0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) 08:57:40 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000007141f052abd7000ffdbdf250900020073797a320000000005005400000000000800010000b7b8d6a5eb066eb5090e319cb42da7a294fe0a0a02c83474cc5c3b550155c417f58828cf1444f8b3ef1c5c579bd6ac1498d944d2aee5e5b26e107db86a38f7933db446275896b40d62d6b982aaa46b118c5700451ac6c436ebce7b58bfb382c098dc44b9c1ecee2a72e942a2a1e3b7769693bb4b7278dc2385c6c2526b0a6fe0eaa64b41d35e8775cf12e3478f803f84"], 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x200}}, 0x800) r1 = socket(0x10, 0x800000000080002, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x8a, 0x2, 0x6, 0x9}, 0x8) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = dup(r2) read$midi(r3, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185647, &(0x7f0000000180)={0x9c0000, 0x0, 0x6fc1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0902, 0x800005, [], @value64=0x4}}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup(r5) 08:57:40 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x51, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xfffffffffffffd43, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5}, {0xd}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffe, 0x1}, @acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) [ 346.786387][ C0] hrtimer: interrupt took 102517 ns [ 347.061353][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 347.260589][ T9439] @þ: Port device veth19 added [ 347.459400][ T28] usb 2-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 347.470278][ T28] usb 2-1: config 1 interface 0 has no altsetting 0 [ 347.503345][ T9448] __nla_validate_parse: 14 callbacks suppressed [ 347.503411][ T9448] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.522893][ T9448] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.664332][ T9448] @þ: Port device veth21 added 08:57:41 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1b, 0xa, 0x7) ioprio_get$pid(0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 347.827988][ T28] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.837288][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.845417][ T28] usb 2-1: Product: syz [ 347.849877][ T28] usb 2-1: Manufacturer: syz [ 347.854628][ T28] usb 2-1: SerialNumber: syz [ 347.931334][ T28] usb 2-1: bad CDC descriptors [ 348.033538][ T9463] IPVS: ftp: loaded support on port[0] = 21 [ 348.133650][ T28] usb 2-1: USB disconnect, device number 2 [ 348.588565][ T9466] IPVS: ftp: loaded support on port[0] = 21 08:57:43 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1b, 0xa, 0x7) ioprio_get$pid(0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 348.939589][ T17] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 349.201476][ T9524] IPVS: ftp: loaded support on port[0] = 21 [ 349.319054][ T17] usb 2-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 349.329545][ T17] usb 2-1: config 1 interface 0 has no altsetting 0 [ 349.488208][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.497703][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.505826][ T17] usb 2-1: Product: syz [ 349.510328][ T17] usb 2-1: Manufacturer: syz [ 349.515069][ T17] usb 2-1: SerialNumber: syz [ 349.711670][ T17] usb 2-1: bad CDC descriptors 08:57:44 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1b, 0xa, 0x7) ioprio_get$pid(0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) [ 349.892155][ T5] usb 2-1: USB disconnect, device number 3 08:57:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYRES64=r0, @ANYRES16=r9, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRES16=r4, @ANYRES16]) [ 350.096790][ T9560] IPVS: ftp: loaded support on port[0] = 21 [ 350.124812][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.196011][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.391442][ T9569] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 350.748970][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.785943][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:57:45 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x240a, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup2(r2, r1) syz_genetlink_get_family_id$batadv(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1b, 0xa, 0x7) ioprio_get$pid(0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x200000d5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x14a, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000180)) wait4(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4, 0x1, 0xff, "01827287fe256295986f658af9a0f654bbfdcde29ffca7f8de340198f523dbfaaa42a22e7187654de745a899d8162c027f3e404bc62f1047bccdbf9b344f43", 0x3f}, 0x58) 08:57:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f00000001c0)=0x1, 0x2a) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000800)={'wg0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', r3}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x9820, 0x4) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4044871) [ 351.274687][ T9604] IPVS: ftp: loaded support on port[0] = 21 [ 351.370768][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.545933][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:57:46 executing program 1: syz_usb_connect(0x1, 0x1a5, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x6d, 0x4e, 0xf7, 0x8, 0x50d, 0x128, 0x1416, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x193, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x2, 0x5, 0x76, 0x2a, 0x5b, 0x0, [], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0xff, 0x8, 0x3, [@generic={0x3b, 0x7, "6deca8c4bc5972a031666b1b430a4ed5ae2e56531cae22599e47b42c443a20415fdd1424f6fa8c21ffb53452532ad543f58a1796012bb99b28"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x3, 0x40, 0x81}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0xd1, 0x2, 0x9, [@generic={0x30, 0x1, "34553d500a74bb6e203230d9165cdbf351fd1dd48a3c7dce0e5e625e122d30e790cd450b57ff61085f00ea223750"}, @generic={0xdb, 0x3, "26fbf2cd8f7c8009ad13e6df2a3eb1f122fc9c9af99ec9af169ba3289b4d68508cdef751cc30f4afd8112a36b8c262e9200364873634f5c1f885fbef28e8834e60a7f5e56eaab575a72a7ccb14aab31db917029cd0aca5e77e051fd793e700e57cf22a08f0cf6cc62ea5cd7fdf646cd2ae7d07e3f8a9f3081535bbaa35578b932fd40e61185865da7f89b9f8b8ba9874816be9bfe069bd81fedb72cf8638730f472c3cb9d468728942cd478e0f6f0faf5f8e5c3b0c7ce2c2e0c0d5d52aa217c47b2e3b4b01051f075d67dfe0863ad7290def685876dbbfa2fb"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x6, 0x3}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x3, 0x3f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x60}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0xff}]}}]}}]}}]}}, 0x0) 08:57:46 executing program 0: socket$kcm(0x2, 0x3, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00', @remote}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) [ 352.194412][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.202730][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.439414][ T8696] usb 2-1: new low-speed USB device number 4 using dummy_hcd 08:57:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x800000, @private2={0xfc, 0x2, [], 0x1}, 0x81, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100636273001c00020018000100"/48], 0x48}}, 0x0) [ 352.714123][ T9644] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 08:57:47 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x2, 0x1, 0x401]}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto={0x2, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {0x3}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000001c0)=""/219, 0x50, 0xdb, 0x8}, 0x20) [ 352.898589][ T8696] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 352.906956][ T8696] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 352.916304][ T8696] usb 2-1: config 0 has no interface number 0 [ 352.922716][ T8696] usb 2-1: config 0 interface 241 altsetting 2 endpoint 0x5 has invalid maxpacket 32, setting to 8 [ 352.933648][ T8696] usb 2-1: config 0 interface 241 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 352.944621][ T8696] usb 2-1: config 0 interface 241 altsetting 2 endpoint 0xD is Bulk; changing to Interrupt [ 352.954925][ T8696] usb 2-1: config 0 interface 241 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 352.965835][ T8696] usb 2-1: config 0 interface 241 altsetting 2 endpoint 0xC has invalid maxpacket 32, setting to 8 [ 352.976787][ T8696] usb 2-1: config 0 interface 241 has no altsetting 0 [ 352.983880][ T8696] usb 2-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=14.16 [ 352.993171][ T8696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.056738][ T8696] usb 2-1: config 0 descriptor?? [ 353.082139][ T9638] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 353.095106][ T9648] BPF:[1] FUNC_PROTO [ 353.099484][ T9648] BPF:return=0 args=( [ 353.103531][ T9648] BPF:0 (anon) [ 353.105691][ T9638] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 353.106969][ T9648] BPF:, 0 (anon) [ 353.117634][ T9648] BPF:, 0 (anon) [ 353.121234][ T9648] BPF:, 0 [ 353.124306][ T9648] BPF:, vararg [ 353.127888][ T9648] BPF:) [ 353.130706][ T9648] BPF: [ 353.133552][ T9648] BPF:Invalid name [ 353.137438][ T9648] BPF: [ 353.137438][ T9648] [ 353.142180][ T9638] raw-gadget gadget: fail, usb_ep_enable returned -22 08:57:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', r9, 0x1, 0x0, 0x3e91, 0x40, {{0x27, 0x4, 0x0, 0x3, 0x9c, 0x66, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xd, "d165eaf9d2cf31cd2d1f29"}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xd, "733a6908602bd5257d317f"}, {0x6, 0x9, "15f45cd453ff83"}, {0x0, 0x9, "b7d79e28abff52"}]}, @noop, @cipso={0x86, 0x11, 0x3, [{0x7, 0x7, "6b0ea15c7c"}, {0x2, 0x4, "c1a9"}]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x7, [{@multicast2, 0x81}]}, @rr={0x7, 0x13, 0xd5, [@remote, @private=0xa010100, @multicast1, @multicast1]}, @lsrr={0x83, 0x23, 0xcb, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop, @noop]}}}}}) connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x6, r10, 0x1, 0xf7, 0x6, @remote}, 0x14) dup3(r4, r2, 0x0) [ 353.411177][ T8696] ax88179_178a 2-1:0.241 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 353.450084][ T8696] ax88179_178a 2-1:0.241 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 08:57:47 executing program 2: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x4, 0x4, [0x0]}) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b9cd86a2d8"}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x894) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x10002, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000380)={0x9, 0xa5a, &(0x7f0000000240)="75aa1ca9447dfa6bee356bacd46499799c8002c2dccd14b28d6a80a99757c410bbe02d73c3707dcc00d9136ec9adb5aef0", &(0x7f0000000280)="1cfebd2d4ecbf510ac8243ad17725c6aaa58ae98a2fb51d2fc218a3fae0a3cee6befd586f085eda813c14d1b426e3ad54669b3c2a596a2d4fa5a6b22f1acb7aca467d3d91e8c0f490e66d046c28d61fd65c33e181c28917f2253c02522aff2b9865af1de389bbb08414f289bf4e5f066cd5b6bb11c629a460534167a351fdee2a63145b2e0f90898e072abf32114b4fc3a7a8684dda0f34d205f86dd1bf31ff82ea070306ecefae19267524befa7cfa519df4eac213a7bd2134c7a66c59e62cc4b8b6102a58726b07179a58e0266dc7567fe2c7a5a9568", 0x31, 0xd7}) socketpair(0x1d, 0x800, 0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='cubic\x00', 0x6) sendto$inet(r5, &(0x7f0000000440)="07bbcb984ab0ec6adff5acca03390e3e272f5a09b8c1defd28c5331a25933c7fd36e0a61d28f669ec8f06df15f7c6a386f2eda9ab15f4c417df63a", 0x3b, 0x4000, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500)='ethtool\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000017c0)={'ip_vti0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x20, 0x1, 0xe562, 0x0, {{0x27, 0x4, 0x0, 0x23, 0x9c, 0x68, 0x0, 0x3, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0x6c, 0x0, 0x5, [0x9, 0x7, 0x7f, 0x6, 0x3]}, @rr={0x7, 0x27, 0x3d, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, @remote]}, @generic={0x89, 0xa, "543731620f1d4a0a"}, @rr={0x7, 0x13, 0x64, [@remote, @multicast1, @broadcast, @rand_addr=0x64010102]}, @end, @generic={0x83, 0x5, "5bc794"}, @rr={0x7, 0x23, 0xea, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @remote, @local, @loopback, @multicast2, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000018c0)={'syztnl0\x00', &(0x7f0000001840)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x86, 0xfa90, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x1, 0x8, 0x800}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'ip6gretap0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001a00)={@dev, @remote, 0x0}, &(0x7f0000001a40)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0xc0, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24044044}, 0x4004c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001bc0)={0x0, 0x81, 0xffff, 0xfffffabf}, &(0x7f0000001c00)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001c40)={r13, 0x9e, "2265f8fcb965140c7c6668a4a1f6d41719dc0e48f20e8b307304fdb05fe031345c536b16430bf3a78c4d6f88eeda5cd2e45843a8e3788a10dd78b8187d170e3450b5874d9dde263f9ab52da4af1a2d19e914062c64092d6e176831359bbd0c06d1e6eb89354df1ab08224cea9887b64c4c721c164982729f3ed731539475494e6262583568db2f0a0f881c4a98c8da6a21fe93c6ce4a83f12a730dcba9d3"}, &(0x7f0000001d00)=0xa6) [ 353.679915][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.702085][ T8696] ax88179_178a 2-1:0.241 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 353.803829][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.857843][ T8696] ax88179_178a 2-1:0.241 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 353.869054][ T8696] ===================================================== [ 353.876110][ T8696] BUG: KMSAN: uninit-value in ax88179_get_mac_addr+0x481/0x850 [ 353.883679][ T8696] CPU: 1 PID: 8696 Comm: kworker/1:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 353.892014][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.902484][ T8696] Workqueue: usb_hub_wq hub_event [ 353.907561][ T8696] Call Trace: [ 353.910941][ T8696] dump_stack+0x21c/0x280 [ 353.915342][ T8696] kmsan_report+0xf7/0x1e0 [ 353.919792][ T8696] __msan_warning+0x58/0xa0 [ 353.924348][ T8696] ax88179_get_mac_addr+0x481/0x850 [ 353.929578][ T8696] ax88179_bind+0x3ec/0x19c0 [ 353.934214][ T8696] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 353.940399][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 353.945631][ T8696] ? ax88179_resume+0x1250/0x1250 [ 353.950755][ T8696] usbnet_probe+0x1152/0x3f90 [ 353.955462][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 353.960688][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 353.965912][ T8696] ? kmsan_set_origin_checked+0x95/0xf0 [ 353.971486][ T8696] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 353.977585][ T8696] ? usbnet_disconnect+0x670/0x670 [ 353.982789][ T8696] usb_probe_interface+0xece/0x1550 [ 353.988056][ T8696] ? usb_register_driver+0x900/0x900 [ 353.993449][ T8696] really_probe+0xf20/0x20b0 [ 353.998071][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.003304][ T8696] driver_probe_device+0x293/0x390 [ 354.008446][ T8696] __device_attach_driver+0x63f/0x830 [ 354.013856][ T8696] bus_for_each_drv+0x2ca/0x3f0 [ 354.018895][ T8696] ? coredump_store+0xf0/0xf0 [ 354.023607][ T8696] __device_attach+0x4e2/0x7f0 [ 354.028411][ T8696] device_initial_probe+0x4a/0x60 [ 354.033464][ T8696] bus_probe_device+0x177/0x3d0 [ 354.038341][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.044225][ T8696] device_add+0x3b0e/0x40d0 [ 354.048776][ T8696] usb_set_configuration+0x380f/0x3f10 [ 354.054350][ T8696] ? usb_set_configuration+0xb41/0x3f10 [ 354.059950][ T8696] usb_generic_driver_probe+0x138/0x300 [ 354.065530][ T8696] ? usb_choose_configuration+0xe70/0xe70 [ 354.071279][ T8696] usb_probe_device+0x311/0x490 [ 354.076362][ T8696] ? usb_register_device_driver+0x540/0x540 [ 354.082281][ T8696] really_probe+0xf20/0x20b0 [ 354.086987][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.092222][ T8696] driver_probe_device+0x293/0x390 [ 354.097369][ T8696] __device_attach_driver+0x63f/0x830 [ 354.102953][ T8696] bus_for_each_drv+0x2ca/0x3f0 [ 354.107835][ T8696] ? coredump_store+0xf0/0xf0 [ 354.112564][ T8696] __device_attach+0x4e2/0x7f0 [ 354.117364][ T8696] device_initial_probe+0x4a/0x60 [ 354.122415][ T8696] bus_probe_device+0x177/0x3d0 [ 354.127494][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.133441][ T8696] device_add+0x3b0e/0x40d0 [ 354.137989][ T8696] usb_new_device+0x1bd4/0x2a30 [ 354.142883][ T8696] hub_event+0x5e7b/0x8a70 [ 354.147369][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.152687][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.158528][ T8696] ? led_work+0x7c0/0x7c0 [ 354.163081][ T8696] process_one_work+0x1688/0x2140 [ 354.168153][ T8696] worker_thread+0x10bc/0x2730 [ 354.172947][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.178184][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.183421][ T8696] kthread+0x551/0x590 [ 354.187608][ T8696] ? process_one_work+0x2140/0x2140 [ 354.192924][ T8696] ? kthread_blkcg+0x110/0x110 [ 354.197755][ T8696] ret_from_fork+0x1f/0x30 [ 354.202194][ T8696] [ 354.204624][ T8696] Local variable ----mac@ax88179_get_mac_addr created at: [ 354.211918][ T8696] ax88179_get_mac_addr+0x4d/0x850 [ 354.217054][ T8696] ax88179_get_mac_addr+0x4d/0x850 [ 354.222175][ T8696] ===================================================== [ 354.229117][ T8696] Disabling lock debugging due to kernel taint [ 354.235492][ T8696] Kernel panic - not syncing: panic_on_warn set ... [ 354.242244][ T8696] CPU: 1 PID: 8696 Comm: kworker/1:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 354.255042][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.265218][ T8696] Workqueue: usb_hub_wq hub_event [ 354.270352][ T8696] Call Trace: [ 354.273678][ T8696] dump_stack+0x21c/0x280 [ 354.278122][ T8696] panic+0x4d7/0xef7 [ 354.282057][ T8696] ? add_taint+0x17c/0x210 [ 354.286591][ T8696] kmsan_report+0x1df/0x1e0 [ 354.291131][ T8696] __msan_warning+0x58/0xa0 [ 354.295748][ T8696] ax88179_get_mac_addr+0x481/0x850 [ 354.300983][ T8696] ax88179_bind+0x3ec/0x19c0 [ 354.305700][ T8696] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 354.311882][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.317112][ T8696] ? ax88179_resume+0x1250/0x1250 [ 354.322166][ T8696] usbnet_probe+0x1152/0x3f90 [ 354.326871][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.332345][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.337574][ T8696] ? kmsan_set_origin_checked+0x95/0xf0 [ 354.343286][ T8696] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 354.349555][ T8696] ? usbnet_disconnect+0x670/0x670 [ 354.354698][ T8696] usb_probe_interface+0xece/0x1550 [ 354.360107][ T8696] ? usb_register_driver+0x900/0x900 [ 354.365416][ T8696] really_probe+0xf20/0x20b0 [ 354.370121][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.375349][ T8696] driver_probe_device+0x293/0x390 [ 354.380486][ T8696] __device_attach_driver+0x63f/0x830 [ 354.385980][ T8696] bus_for_each_drv+0x2ca/0x3f0 [ 354.390862][ T8696] ? coredump_store+0xf0/0xf0 [ 354.395574][ T8696] __device_attach+0x4e2/0x7f0 [ 354.400382][ T8696] device_initial_probe+0x4a/0x60 [ 354.405438][ T8696] bus_probe_device+0x177/0x3d0 [ 354.411099][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.417070][ T8696] device_add+0x3b0e/0x40d0 [ 354.421623][ T8696] usb_set_configuration+0x380f/0x3f10 [ 354.427093][ T8696] ? usb_set_configuration+0xb41/0x3f10 [ 354.432756][ T8696] usb_generic_driver_probe+0x138/0x300 [ 354.438311][ T8696] ? usb_choose_configuration+0xe70/0xe70 [ 354.444175][ T8696] usb_probe_device+0x311/0x490 [ 354.449163][ T8696] ? usb_register_device_driver+0x540/0x540 [ 354.455175][ T8696] really_probe+0xf20/0x20b0 [ 354.460212][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.465506][ T8696] driver_probe_device+0x293/0x390 [ 354.470635][ T8696] __device_attach_driver+0x63f/0x830 [ 354.476198][ T8696] bus_for_each_drv+0x2ca/0x3f0 [ 354.481056][ T8696] ? coredump_store+0xf0/0xf0 [ 354.485745][ T8696] __device_attach+0x4e2/0x7f0 [ 354.490529][ T8696] device_initial_probe+0x4a/0x60 [ 354.495673][ T8696] bus_probe_device+0x177/0x3d0 [ 354.500533][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.506345][ T8696] device_add+0x3b0e/0x40d0 [ 354.510871][ T8696] usb_new_device+0x1bd4/0x2a30 [ 354.515738][ T8696] hub_event+0x5e7b/0x8a70 [ 354.520197][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.525549][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.531416][ T8696] ? led_work+0x7c0/0x7c0 [ 354.535757][ T8696] process_one_work+0x1688/0x2140 [ 354.540979][ T8696] worker_thread+0x10bc/0x2730 [ 354.545747][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.550975][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.556613][ T8696] kthread+0x551/0x590 [ 354.560693][ T8696] ? process_one_work+0x2140/0x2140 [ 354.565900][ T8696] ? kthread_blkcg+0x110/0x110 [ 354.570838][ T8696] ret_from_fork+0x1f/0x30 [ 354.576234][ T8696] ------------[ cut here ]------------ [ 354.581772][ T8696] kernel BUG at mm/kmsan/kmsan.h:87! [ 354.587113][ T8696] invalid opcode: 0000 [#1] SMP [ 354.591991][ T8696] CPU: 1 PID: 8696 Comm: kworker/1:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 354.601692][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.611879][ T8696] Workqueue: usb_hub_wq hub_event [ 354.616965][ T8696] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 354.623540][ T8696] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 354.643304][ T8696] RSP: 0018:ffff8880692be5a8 EFLAGS: 00010046 [ 354.649364][ T8696] RAX: 0000000000000002 RBX: 0000000007cf0002 RCX: 0000000007cf0002 [ 354.657331][ T8696] RDX: 0000000000000000 RSI: 00000000000001a0 RDI: ffff8880692be68c [ 354.667494][ T8696] RBP: ffff8880692be650 R08: ffffea000000000f R09: ffff88812fffa000 [ 354.675644][ T8696] R10: 0000000000000002 R11: ffff888111f23d00 R12: 0000000000000000 [ 354.685063][ T8696] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 354.693295][ T8696] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 354.702223][ T8696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.708974][ T8696] CR2: 0000000008b9b048 CR3: 00000000542db000 CR4: 00000000001426e0 [ 354.716941][ T8696] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.724989][ T8696] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.732949][ T8696] Call Trace: [ 354.736247][ T8696] kmsan_check_memory+0xd/0x10 [ 354.741175][ T8696] iowrite8+0x99/0x300 [ 354.745316][ T8696] pvpanic_panic_notify+0xb7/0xe0 [ 354.750459][ T8696] ? pvpanic_mmio_remove+0x60/0x60 [ 354.755618][ T8696] atomic_notifier_call_chain+0x123/0x290 [ 354.761334][ T8696] panic+0x560/0xef7 [ 354.765226][ T8696] ? add_taint+0x17c/0x210 [ 354.769635][ T8696] kmsan_report+0x1df/0x1e0 [ 354.774176][ T8696] __msan_warning+0x58/0xa0 [ 354.778674][ T8696] ax88179_get_mac_addr+0x481/0x850 [ 354.784299][ T8696] ax88179_bind+0x3ec/0x19c0 [ 354.788878][ T8696] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 354.795045][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.800241][ T8696] ? ax88179_resume+0x1250/0x1250 [ 354.805258][ T8696] usbnet_probe+0x1152/0x3f90 [ 354.809924][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.815162][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.820348][ T8696] ? kmsan_set_origin_checked+0x95/0xf0 [ 354.826045][ T8696] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 354.832117][ T8696] ? usbnet_disconnect+0x670/0x670 [ 354.837220][ T8696] usb_probe_interface+0xece/0x1550 [ 354.842528][ T8696] ? usb_register_driver+0x900/0x900 [ 354.847804][ T8696] really_probe+0xf20/0x20b0 [ 354.852387][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.857581][ T8696] driver_probe_device+0x293/0x390 [ 354.862687][ T8696] __device_attach_driver+0x63f/0x830 [ 354.868055][ T8696] bus_for_each_drv+0x2ca/0x3f0 [ 354.873070][ T8696] ? coredump_store+0xf0/0xf0 [ 354.877745][ T8696] __device_attach+0x4e2/0x7f0 [ 354.882507][ T8696] device_initial_probe+0x4a/0x60 [ 354.887524][ T8696] bus_probe_device+0x177/0x3d0 [ 354.892410][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.898209][ T8696] device_add+0x3b0e/0x40d0 [ 354.902712][ T8696] usb_set_configuration+0x380f/0x3f10 [ 354.908163][ T8696] ? usb_set_configuration+0xb41/0x3f10 [ 354.913709][ T8696] usb_generic_driver_probe+0x138/0x300 [ 354.919286][ T8696] ? usb_choose_configuration+0xe70/0xe70 [ 354.925251][ T8696] usb_probe_device+0x311/0x490 [ 354.930152][ T8696] ? usb_register_device_driver+0x540/0x540 [ 354.936037][ T8696] really_probe+0xf20/0x20b0 [ 354.940672][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 354.946067][ T8696] driver_probe_device+0x293/0x390 [ 354.951180][ T8696] __device_attach_driver+0x63f/0x830 [ 354.956547][ T8696] bus_for_each_drv+0x2ca/0x3f0 [ 354.961620][ T8696] ? coredump_store+0xf0/0xf0 [ 354.966292][ T8696] __device_attach+0x4e2/0x7f0 [ 354.971049][ T8696] device_initial_probe+0x4a/0x60 [ 354.976061][ T8696] bus_probe_device+0x177/0x3d0 [ 354.980903][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 354.986699][ T8696] device_add+0x3b0e/0x40d0 [ 354.991245][ T8696] usb_new_device+0x1bd4/0x2a30 [ 354.996093][ T8696] hub_event+0x5e7b/0x8a70 [ 355.000515][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 355.005699][ T8696] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 355.011492][ T8696] ? led_work+0x7c0/0x7c0 [ 355.015812][ T8696] process_one_work+0x1688/0x2140 [ 355.020834][ T8696] worker_thread+0x10bc/0x2730 [ 355.025587][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 355.031014][ T8696] ? kmsan_get_metadata+0x116/0x180 [ 355.036327][ T8696] kthread+0x551/0x590 [ 355.040386][ T8696] ? process_one_work+0x2140/0x2140 [ 355.046103][ T8696] ? kthread_blkcg+0x110/0x110 [ 355.050855][ T8696] ret_from_fork+0x1f/0x30 [ 355.055416][ T8696] Modules linked in: [ 355.059303][ T8696] ---[ end trace 5e9af704f3100fd6 ]--- [ 355.065446][ T8696] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 355.072023][ T8696] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 355.091617][ T8696] RSP: 0018:ffff8880692be5a8 EFLAGS: 00010046 [ 355.097671][ T8696] RAX: 0000000000000002 RBX: 0000000007cf0002 RCX: 0000000007cf0002 [ 355.105629][ T8696] RDX: 0000000000000000 RSI: 00000000000001a0 RDI: ffff8880692be68c [ 355.113587][ T8696] RBP: ffff8880692be650 R08: ffffea000000000f R09: ffff88812fffa000 [ 355.121557][ T8696] R10: 0000000000000002 R11: ffff888111f23d00 R12: 0000000000000000 [ 355.129607][ T8696] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 355.137571][ T8696] FS: 0000000000000000(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 355.146714][ T8696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.153284][ T8696] CR2: 0000000008b9b048 CR3: 00000000542db000 CR4: 00000000001426e0 [ 355.161247][ T8696] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.169324][ T8696] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.177290][ T8696] Kernel panic - not syncing: Fatal exception [ 355.184203][ T8696] Kernel Offset: disabled [ 355.188541][ T8696] Rebooting in 86400 seconds..