00001540)={&(0x7f00000014c0)={0x5c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000015c0)=r2) r7 = openat$zero(0xffffff9c, &(0x7f0000001600)='/dev/zero\x00', 0x800, 0x0) read$sequencer(r7, &(0x7f0000001640)=""/92, 0x5c) r8 = signalfd4(r1, &(0x7f00000016c0)={[0x6, 0x5]}, 0x8, 0x80800) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) [ 419.307416][ T28] audit: type=1400 audit(1599437484.234:9): avc: denied { execmem } for pid=8750 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 419.514090][ T8714] Bluetooth: hci0: command 0x0419 tx timeout 00:11:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x1}]}) [ 420.665233][ T8753] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 420.917811][ T8751] IPVS: ftp: loaded support on port[0] = 21 00:11:25 executing program 0: syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}, 0x38}]}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffd9c, &(0x7f0000000240)={&(0x7f00000003c0)=@delnexthop={0x0, 0x69, 0x502, 0x70bd28, 0x25dfdbfe}, 0xfffffe57}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000000) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40041271, &(0x7f0000000380)=0x77c4fe4e) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) select(0x40, &(0x7f0000000180)={0x7, 0x6, 0x4, 0x81, 0x200, 0x289, 0x3, 0xfffffffffffffffa}, &(0x7f00000001c0)={0xffffffff, 0x5, 0x1c0000, 0x200, 0x3, 0x8, 0x4, 0x81}, &(0x7f0000000200)={0x32cb, 0x400, 0x3f, 0x6, 0xc60, 0x7f, 0x8, 0x10000}, &(0x7f00000002c0)={r1, r2/1000+60000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x2bd, 0x200, 0x401, 0x5}, &(0x7f0000000400)=0x10) [ 421.515241][ T8798] hfs: can't find a HFS filesystem on dev loop0 [ 421.569929][ T8824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8824 comm=syz-executor.0 [ 421.686911][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 421.701182][ T8798] hfs: can't find a HFS filesystem on dev loop0 [ 421.782750][ T8798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8798 comm=syz-executor.0 [ 421.999545][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.008405][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.018804][ T8751] device bridge_slave_0 entered promiscuous mode 00:11:27 executing program 0: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000240)={0x1, 0xa, &(0x7f00000000c0)=[0x400, 0x5, 0x4, 0x4, 0x20, 0x8, 0x2, 0x6, 0x81, 0xaf99], &(0x7f0000000100)=[0x3ff, 0x8, 0xffff], &(0x7f00000001c0)=[0x6, 0x7321, 0x0, 0x1000, 0x1f], &(0x7f0000000200)=[0x5, 0xd6be, 0x8616, 0x8001, 0x0, 0xf000, 0x200, 0x8, 0x2]}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000280)={0x4, 0x800, 0x1, 0x2, 0x9, 0x3}) r0 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) write$UHID_INPUT2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c0000000d00d1473b766f55f998bcabf5a86fadbe27544766cb4a18ba175d36c7f63e50f339eadc0800e1013e54a9d42fbc1ef8d1719a6ed7a8ad1d206bbeff0febb1d47b5f6b9abc8aac561732800b98ea47bbe7de6814be8fc24fc0879ef2fd691eef0900017398c13f49517b21968584443430ab000001000000000000000000"], 0x13) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a5ffffff0a000000ff45ac0000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) r1 = openat$pfkey(0xffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2483c0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000300)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x9, 0x101, 0xff, 0x9, 0x9, 0x1000}) [ 422.131607][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.139460][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.150350][ T8751] device bridge_slave_1 entered promiscuous mode [ 422.228681][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.247374][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.325055][ T8751] team0: Port device team_slave_0 added [ 422.344383][ T8751] team0: Port device team_slave_1 added [ 422.394529][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.403272][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.431489][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.450997][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.459203][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.487572][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.527405][ T4876] loop0: p1 p2 < > p3 p4 < p5 > [ 422.532518][ T4876] loop0: partition table partially beyond EOD, truncated [ 422.545355][ T4876] loop0: p1 start 10 is beyond EOD, truncated [ 422.551610][ T4876] loop0: p2 start 25 is beyond EOD, truncated [ 422.557842][ T4876] loop0: p3 start 4276224225 is beyond EOD, truncated [ 422.564778][ T4876] loop0: p4 size 2 extends beyond EOD, truncated [ 422.579778][ T8751] device hsr_slave_0 entered promiscuous mode [ 422.598929][ T4876] loop0: p5 start 10 is beyond EOD, truncated [ 422.609837][ T8751] device hsr_slave_1 entered promiscuous mode [ 422.626833][ T8928] loop0: p1 p2 < > p3 p4 < p5 > [ 422.633299][ T8928] loop0: partition table partially beyond EOD, truncated [ 422.634045][ T8751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.640869][ T8928] loop0: p1 start 10 is beyond EOD, truncated [ 422.648877][ T8751] Cannot create hsr debugfs directory [ 422.654947][ T8928] loop0: p2 start 25 is beyond EOD, truncated [ 422.654991][ T8928] loop0: p3 start 4276224225 is beyond EOD, truncated [ 422.673776][ T8928] loop0: p4 size 2 extends beyond EOD, truncated [ 422.706376][ T8928] loop0: p5 start 10 is beyond EOD, truncated [ 422.794553][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 422.876910][ T8938] loop0: p1 p2 < > p3 p4 < p5 > [ 422.882592][ T8938] loop0: partition table partially beyond EOD, truncated [ 422.892157][ T8938] loop0: p1 start 10 is beyond EOD, truncated [ 422.898607][ T8938] loop0: p2 start 25 is beyond EOD, truncated [ 422.904836][ T8938] loop0: p3 start 4276224225 is beyond EOD, truncated [ 422.914803][ T8938] loop0: p4 size 2 extends beyond EOD, truncated [ 422.938939][ T8938] loop0: p5 start 10 is beyond EOD, truncated 00:11:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x9) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e00000013008105e00f80ecdbc0b5f207c804a01e000000302e20000000a3030e001a000a000400aacc2b2043b2", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 423.291487][ T8751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 423.335950][ T8751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.373736][ T8751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.431070][ T8751] netdevsim netdevsim1 netdevsim3: renamed from eth3 00:11:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x2, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r2, r0) 00:11:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = openat$zero(0xffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x40, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000050603050000000000000000070000020900030073797a32002268dee88661f86797d5ac"], 0x28}, 0x1, 0x0, 0x0, 0xf49b99a4678dec1e}, 0x44800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1f}, @IFLA_ADDRESS={0xa}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40086437, &(0x7f0000000580)={0x0, 0x6}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x799}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff00000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4dcc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x40885) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4fa}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) syz_read_part_table(0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0x8001}]) [ 424.103575][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.178699][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.187858][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.220355][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.255713][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.267014][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.276979][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.284308][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.348758][ T9019] loop0: p1 p2 p3 p4 [ 424.353069][ T9019] loop0: partition table partially beyond EOD, truncated [ 424.358799][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.361039][ T9019] loop0: p1 size 11290111 extends beyond EOD, truncated [ 424.369667][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.387177][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.396615][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.405730][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.414833][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.425816][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.436675][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.447177][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.465105][ T8714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.480948][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.491323][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.505739][ T9019] loop0: p2 size 100663296 extends beyond EOD, truncated [ 424.515031][ T9019] loop0: p3 start 4293001441 is beyond EOD, truncated [ 424.521901][ T9019] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 424.575755][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.585759][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.619058][ T8751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.632578][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 424.656657][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.667186][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.771815][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.779994][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.832097][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 00:11:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1c1e00002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000ec1d02"], 0x1e1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 424.873158][ T8714] Bluetooth: hci1: command 0x041b tx timeout [ 425.002764][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 425.013546][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 425.112438][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 425.122627][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.152087][ T8751] device veth0_vlan entered promiscuous mode [ 425.167616][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 425.177780][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.214969][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.235930][ T8751] device veth1_vlan entered promiscuous mode [ 425.251717][ T9034] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 425.278292][ T9034] netlink: 7656 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.358571][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.381656][ T9036] netlink: 7656 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.425851][ T9036] netlink: 7656 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.451273][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 425.461051][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 425.470645][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.481122][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.508990][ T8751] device veth0_macvtap entered promiscuous mode [ 425.536842][ T8751] device veth1_macvtap entered promiscuous mode [ 425.602385][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 425.613908][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.627948][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.638355][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 425.648633][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.658256][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.668423][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.798330][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 425.809939][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.824414][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.841777][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.853286][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.610271][ T9045] hfs: unable to parse mount options [ 426.864923][ T9045] hfs: unable to parse mount options [ 426.963300][ T17] Bluetooth: hci1: command 0x040f tx timeout 00:11:32 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8001, 0x3204, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) openat$proc_capi20ncci(0xffffff9c, 0x0, 0x480, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x91}, "478c41f241b78fbc06494a0965faba6366e90009689a5a6905448385b2bf4ac8a86a7a30df59b917f1643fe35b9e5ea457d5aaf913315273d7827363ec155f7947c81260279e1739378fbc865b5face924277a91b67e55a4636f17794dd613bbc6898687be734d0c971663ec0d2da1982cd44dc0dba482f836d06c8b95a16f1d22588cfbe04bb8af4d6abd5633866c44ff"}, 0x95) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 427.455150][ T2280] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 427.477632][ T9058] IPVS: ftp: loaded support on port[0] = 21 [ 427.606122][ T2280] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 427.630674][ T9080] IPVS: ftp: loaded support on port[0] = 21 00:11:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:11:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x400c4150, &(0x7f0000000540)={0x0, &(0x7f0000000440)="cf29a533c87637a10d6fc82af54096899f1d80deeea8b2bb96cee9c04ac753940e09531792436bd61cd50031843bd5900ee8ad303d9e682c518679694201e94d49066988055e222a870ebee259ce9b725037c1396c584e73000f0a8c8447a08dcdba8f9a943610499e03333aa4ad9dadf794e0046946de028fd5c816ae7b0e32b245188189ce538d6225b3f5bc83991f58ba74e4c1ae336825ba22e7d795ce23b018ad703372d6430670b9a584a962f9058985cd673327d842145573a7ea63b325dd89ce", 0xc4}) lseek(r4, 0xfffffffffffffffe, 0x4) r5 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r5, 0xfffffffffffffffe, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000}) r6 = openat$ipvs(0xffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000380)={r7, 0x2}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000200)={r7, 0x1}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r7, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={r7, 0x2c}) getpeername$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e40)={&(0x7f00000005c0)={0x186c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14f0, 0x3, 0x0, 0x1, [{0x10fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "264a4d34d29c26babc4a6b8495d57d93704852c649f0095c86d1057c88a31fbb9c514d3879d50f6b3bf9ebc81da2b71e9b2f00db422d013a3c550248ce4b43e30c18a4cc1fa4e15ead92aa17ba05a09635f308a771bd68a4edaecaf7a332ffcb2e9b0d0f480b5237f02e2aec40b6b25665b4b4df982597aa41437913eae75495a00355ba7fd406c7b6932328afaa626d62177d1de02d77a298e4710495"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x28, 0x1, "248c8c12bf16c80f3cbca4b5584a3e3a4a6199a5cc08101cac7f059799654713c3ba6047"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "089c694b8de08a25d44939fcd332b1eb18f2882cd161c535187ed2d849d3a06086aa0e96738780968ad61cc9df46d5ed3b338c0626801e8462ccc4e3485eae4b6f3d3fbdb9cfb49a923e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "19e9101d191ac6df8f71dc81ca9970eaaea146bb75e6ed40db4a2a4c7d82d5aeff50609381e5e4ace5fb9362f5b5cf22d59925ad7567d612a199b50cdd82de87963dcc716378f05ac6ebc33952b15eb6c020b4a7263f3b91e5ef97bdab850e338e64bfd1bc94cd25e12f803b319079a316cfc30802bb9a7222d2e369f48cdc7a8bae7a64fdd7bf8b31d1797ae7a612d671648e1de4b38941a914cc1c346707100ba7f97e17d59184ce61a4065faa51721c21114f079ed35f5ce517926a3d8b9e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x79, 0x1, "e6afc10d7fe338a98a97dc806c71d3b87d32a0271ca06536312f2924a03b0753bb8eb70f65dce4917d28b42c2173f74152908f0c49efaadd6bf837bb148fe7724327f774c376e773de2d8abe169a0d95d067cded9fd10e723821d03150b4809a30f2644fff7091310f4e30b21562280686dd222525"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "c7289b1d075a71cce620aa60614f959fa13431409d7efa9d208fdd7f4351b835172f"}, @NFTA_DATA_VALUE={0x45, 0x1, "db4938ebf096dd8b0e93e8eb3e1388c1ee6a49ce149fb269216698c5c21a8b1ad273a38449d6ca75ae2b9ce55d084437d7923f973643372a0b6f26cb675afaf4ac"}, @NFTA_DATA_VALUE={0xa4, 0x1, "1427a94f0aa9429a24969fc4f87493045b0516cb471c9a53129b8883b214d19dfcb7e7daec881e63bb0749fe083feb381e765ee2aa6c0b0b8bea8d7a24b503d66573eea2c27bdab2554febbcd8a615490c63af0db43c79fae53e2cb98682c570672beec3597673724c9dbca131ede5d4a166e755d73922a47531dd98b97f0afd7b3e83198bb702e47a21109c583888d25cbdc2608e10a982d53e3004682f2999"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x358, 0x3, 0x0, 0x1, [{0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x1dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "4eae3bd81fdd1747af1929a9078358ab0c40eeac304faee07752e0caef034c9ce5adcbec5f3e9af3e012ac692c618b3701c068fd5f0b1ec2f7b81ac51054427e8cbeae0cd4bbf96c132c2b12ab6c10cecb673cff2700710cc1e274e6cd38a9806b06fc92452db40c1f151e9cda89e796fb5759800f72092ccd89ad969d47f3b1d396e5c057"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "8e39e069e48cd237bd03a4019e4349c2e98f1c97b1be3eda004e9e32eb51eb37e934109acebbabfb6faffbb7bda526c27584a416ba8ab15bb1fcd9b30cf006"}, @NFTA_DATA_VALUE={0xee, 0x1, "88eb9d3485c3483db135cfc47da699af12b7c5160ac15fc5d6d2a7d382027ed339e82b27500e4c6bbeb3551966518374c70a30a7644009fc2e81f57efa036e2d3c38c859fa30139ef62d72e23a43689655940f27663610e76c1e3512813697620ffd9c013f50029537146230e320fecf0f6742ecebd6642cba0b5387b548b9bcfd198b36935af7fff5fda7bba3f34e80a6affb67944cd1e230a9b7acfc8b1a442d23f5be9da5122a92f1cd75d933480ada1ceb621818fa436f4488d46507551efeedeecabbbbd2537314afd62efed9dd78902d3cd3ceeb1e38975c5e7213ceac835b3a91e8288abb09b5"}]}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "91a623c8b0b2ac02ffc8cbbd6116cfa09f9c2fe6a25c5140c82ac600d2f701e3927784b6ab1a0ef0362d1c74831ef105cd1bd638491f448f23346bb90d89910ea6e5868e622987f7ff0a037ec5866f2a7dcbc0fe13fb168f965ca7b60f95851b5abf23487802b0133fab97bfeeb7f8db510b80a12546c21856881f03992320910b40eeb8c3428db632cf39a82e4459339aef8ed6c18fab32c189a8692d6839170aacd7c9e400f45889a01a6c05ed965b755f7e4c5c0a42e4fe4b82418d2f1480955e2cefa34610f466f1f716ae"}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x186c}, 0x1, 0x0, 0x0, 0x20040040}, 0x91) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0xffffff7f0e000000}, 0x200000a0) [ 428.070997][ T9105] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 428.266706][ T9117] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 428.454180][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd 00:11:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r4, 0xfffffffffffffffe, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x3}) sendmsg$xdp(r1, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x8001) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x60002014}) [ 428.693053][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 428.824792][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 428.833678][ T17] usb 2-1: can't read configurations, error -22 [ 428.977263][ T28] audit: type=1400 audit(1599437493.904:10): avc: denied { block_suspend } for pid=9127 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 429.013133][ T17] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 429.043666][ T8720] Bluetooth: hci1: command 0x0419 tx timeout 00:11:34 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x20) openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x28981, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x1d00002e) openat$mice(0xffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x200) [ 429.264432][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 429.383823][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 429.392966][ T17] usb 2-1: can't read configurations, error -22 [ 429.447405][ T17] usb usb2-port1: attempt power cycle [ 429.650110][ T28] audit: type=1800 audit(1599437494.574:11): pid=9132 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15752 res=0 00:11:34 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x39, 0x1) socket(0x100000000011, 0x6, 0x0) 00:11:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'wg0\x00'}]}, 0x38}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x0, 0x5]}, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002840}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={r6}, 0x8) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r7}, 0x10) [ 430.163522][ T17] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 430.254414][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 430.374428][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 430.383600][ T17] usb 2-1: can't read configurations, error -22 [ 430.533696][ T17] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 430.624615][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 430.745501][ T17] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 239 [ 430.755078][ T17] usb 2-1: can't read configurations, error -22 [ 430.770888][ T17] usb usb2-port1: unable to enumerate USB device 00:11:35 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000100)=""/98) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 00:11:36 executing program 1: openat$dsp(0xffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@end, @timestamp_addr={0x44, 0x14, 0x98, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x36}}, {@local}]}, @lsrr={0x83, 0x17, 0x0, [@loopback, @empty, @broadcast, @broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}]}, @noop]}}}}}}}, 0x0) [ 431.228622][ T28] audit: type=1400 audit(1599437496.154:12): avc: denied { create } for pid=9144 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 431.311751][ T28] audit: type=1400 audit(1599437496.184:13): avc: denied { name_connect } for pid=9144 comm="syz-executor.0" dest=20002 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 00:11:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() fsetxattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="de50d5948da8d8f2d9317e633446ffde6edef442b1225a73d487b2ce23bf4d328a69d0992213ca8379bdbff2bcaf4427d81b99c39e39ebf83d05068f0b54b515fab8d062e505e0e69855219ab564274887b7e9a27baf5275675e4c5763c059004784d0c76fa77c9ef957932439f2d03ab6bbde7ee1e0b2bf91a5c50f820be85f1fa98c1dc98438c67e22c8a056a7d2b18bcd5c78d627b341c1ade4ed6706f9ed038b224621323a845be477ceaf4208657f0e1e04ffd4444ae8db70d6c2a6f80156ce19cd54f1196bdd5298739398fc28b82f41"], &(0x7f00000001c0)=',&\x00', 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) sendfile(r2, r1, 0x0, 0xedc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x20000040) [ 431.751094][ C0] hrtimer: interrupt took 67111 ns 00:11:37 executing program 1: openat$ttyprintk(0xffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x2000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x121480, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000200)="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") ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @multicast1}, 0x107d0837}, @in6={0xa, 0x4e20, 0x3, @local, 0xffff}, @in6={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0xb07, @empty, 0x80000001}], 0xa0) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r4, 0xfffffffffffffffe, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000180)={0x1, 0x7}) sendfile(r1, r3, 0x0, 0xffffff68) 00:11:37 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000fa02030109029c000201000000090400000102090000052406000105240000000d240f0100000000000001000006241a00100004240206152412ca06a317a88b0407240a001f31010c241b0002"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x3f}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={r0, 0x8}, 0x8) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x10041) 00:11:37 executing program 1: link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000034152108c605033e651ad102000000000904770004000000ff026100"], 0x0) [ 432.714242][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 432.953802][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 433.083809][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.083930][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.084084][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.335775][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.345035][ T17] usb 1-1: New USB device strings: Mfr=250, Product=2, SerialNumber=3 [ 433.353455][ T17] usb 1-1: Product: syz [ 433.358314][ T17] usb 1-1: Manufacturer: syz [ 433.363078][ T17] usb 1-1: SerialNumber: syz [ 433.369963][ T3367] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 433.467591][ T17] cdc_wdm 1-1:1.0: invalid descriptor buffer length [ 433.475792][ T17] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 433.613258][ T3367] usb 2-1: Using ep0 maxpacket: 8 [ 433.654902][ T3367] usb 2-1: no configurations [ 433.659724][ T3367] usb 2-1: can't read configurations, error -22 [ 433.701445][ T3226] usb 1-1: USB disconnect, device number 2 [ 433.842890][ T3367] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 434.082808][ T3367] usb 2-1: Using ep0 maxpacket: 8 [ 434.134617][ T3367] usb 2-1: no configurations [ 434.139397][ T3367] usb 2-1: can't read configurations, error -22 [ 434.155769][ T3367] usb usb2-port1: attempt power cycle [ 434.493480][ T3226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 434.733740][ T3226] usb 1-1: Using ep0 maxpacket: 16 [ 434.852781][ T3226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.863884][ T3226] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.873596][ T3226] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.892739][ T3367] usb 2-1: new high-speed USB device number 8 using dummy_hcd 00:11:39 executing program 2: getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0xff, "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"}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000040) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x200400, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) r2 = dup3(0xffffffffffffffff, r1, 0x6885787d7172e2cc) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000a80)=""/198, 0xc6, 0x8, &(0x7f0000000bc0)={r3, r4+60000000}) openat$vga_arbiter(0xffffff9c, &(0x7f0000000c00)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000c40)={'caif0\x00'}) setxattr$trusted_overlay_nlink(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='trusted.overlay.nlink\x00', &(0x7f0000000d00)={'L-', 0x7fff}, 0x16, 0x1) r5 = fsmount(r2, 0x1, 0x72) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000d40)={0x0, 0x5, 0x7, [0xd1, 0x8, 0x7, 0x1ff, 0x1, 0xaa, 0x3]}, &(0x7f0000000d80)=0x16) r6 = openat$autofs(0xffffff9c, &(0x7f0000000dc0)='/dev/autofs\x00', 0x100, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x400c4152, &(0x7f00000010c0)={0x0, &(0x7f0000001080)=[&(0x7f0000000e00)="af6f2f267dc9852279d48d0c116b141e9f2207c4fce15478bb1745143c67b82a70e2bd7c29cff44ca12364b2600cc0885fe9273c7a622fda51d5bb65795b04e769879eaa3d0b772cb0ee72e23bc84e78e0d838623eea292151e5eae4b776e6133177485fb04d", &(0x7f0000000e80)="a3cc565d09de10ad855a3bd2b3576dabb6f5370cf37251c7fd2fac6bc0a53dcf3d6b708b35c4f7d304baf5b4d79c24638629bfbea1006cb576dad26f9d1a6dc0bfce6f49dab72c2c7fa9819918c3716457b12d38fcc8c49dff6f900cdd03d23ccef5c2e2888d794ac5c0eb5eba0f55970e04f27e2d76866f654350c0d023de8b55a2500c1c4600da2e277675e1745ded8061b9fc1a0a428ea3334134a8ca40e601fa1923a5a2e4da1b585bc4a7a578301179fa2b45c2cdc32bb515f9323f8629ab58436a91ce87d779f7130797f9583d4eba8227d273", &(0x7f0000000f80)="a6a6479c35d93beec52bdc610b6683ed1107cc37ec32e44d1056ca121d8a2490d44b59a7466d59cf63e7651eaf962107fd9f449e990a5028ba319f3c1236879eab2c3cd30abe7c8f25b7643dc9133fe8886d63de567a9f952423d0d61d38c7cac66138d912127c5076c0db11b6793376d2d1d1318dfbcd836e98aba10df7450b478c5a2603b51ca089a985aae01421c04974c517f857ce1dfb1f46a03c4167586622d16f55e5277e08fe505b6d3a951e3de269bef063d55067ac11d8f0af077010920debc2f33456ebd8"], 0xe3e}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000001140)=0x8) [ 435.014835][ T3367] usb 2-1: Using ep0 maxpacket: 8 [ 435.043299][ T3226] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.052692][ T3226] usb 1-1: New USB device strings: Mfr=250, Product=2, SerialNumber=3 [ 435.061228][ T3226] usb 1-1: Product: syz [ 435.066142][ T3226] usb 1-1: Manufacturer: syz [ 435.070862][ T3226] usb 1-1: SerialNumber: syz [ 435.074696][ T3367] usb 2-1: no configurations [ 435.080338][ T3367] usb 2-1: can't read configurations, error -22 [ 435.166720][ T3226] cdc_wdm 1-1:1.0: invalid descriptor buffer length [ 435.173858][ T3226] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 435.284081][ T3367] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 435.393999][ T3367] usb 2-1: Using ep0 maxpacket: 8 [ 435.400057][ T9041] usb 1-1: USB disconnect, device number 3 [ 435.437696][ T3367] usb 2-1: no configurations [ 435.442663][ T3367] usb 2-1: can't read configurations, error -22 [ 435.470987][ T3367] usb usb2-port1: unable to enumerate USB device 00:11:40 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_names='gre0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000100005070000020000000000000000008419ea00390193fd7406051e9664bbd5e4fc6648e92f9bf17b166343a40c29ab06e241f79ad026a6821fc9ac164caeac729a23d706854664720e9e8ba3607497f5dd52e9d9a88d27dea590b2c394e2eaa203552811f46d7f170af120c51cb423598bbc0c0431d320e481dc5eec79f5654685", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000200)={r2, 0x3f, 0x8, 0x8}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') r5 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0xfffffff7, 0x80001) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x10) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r6, 0x2f, 0x38, 0x0, 0x2, 0x66, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x760, 0xffffff6e, 0x5}}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)="f13828cf71ab660cdc2813e66444a9b28ece5bb905e1b5c3dac2b116f03696b7c1a264a4045d586b548b74249247498d21e832564dc33fd2399d0e201c92b09437cade15b674f1e2ca4f8b72c4288a6363efbda29ee5c13a38b2174da4a59a9787ce0de47442e43b1bb642f5228bfa95e90870e1fcf26899e845d101cd6211051a70e4280a9f09448e4db4ea8aa5520ce7925c132f0c32b8e57fa7f677e5a6210cdc9985d34cbbfeac7d2b771eb8fbb9ec52069ed41c652b43b16da82cd8267ab22ea9c7988cd08b2f242a0cb01232df7340", 0xd2) [ 435.818114][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 435.879755][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64=0x0], 0xc) 00:11:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000002100)=ANY=[@ANYRES16=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000280), 0x10}, 0x74) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000100)="f81d471e4e05615e718901e469e67966e36caeeaca7b49f6a4dc86adc38fcb2001bdae7c547424a4c99ec3890154dd9cdf58a98efb6cc34174629ada78949efb7c6bf389b0f25f24d4f07e3e27e7336b9c60c06dc3e93027273438cb85c57b2870f8de68ccfea3e4556b73332e56ddab4a928ac295f14d55bf5d0741508f62e3d7ebbdad7c1f0110a5524b4bce009547846e99c73dc1d989953471c93a162cd6263597e2116c9c0b4319a53053b0b593") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c19079268f6bdbeb00581412", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80000) 00:11:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r3, 0x16b09}}, 0x20}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24048040}, 0x80) 00:11:41 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) prctl$PR_GET_THP_DISABLE(0x2a) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0xda9, 0x4) getpid() ptrace$pokeuser(0x6, 0x0, 0x0, 0xfffffffffffffffe) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 436.514673][ T9215] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 436.596911][ T9224] device bond1 entered promiscuous mode [ 436.604057][ T9224] 8021q: adding VLAN 0 to HW filter on device bond1 00:11:41 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8a9e202e2f6275730a"], 0x9) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./bus\x00', 0xffffffff, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000180)="b2e82caa4c1c894b6dd8eecf812f95bee1a3b3b3df336975ae2eba863f1f377f41f030691e5349523869adc9fd75d5fbd1a1f7e068d201ed", 0x38, 0x80}, {&(0x7f0000000280)="0bf089b2f74411741b40f447733d6c145580cf8f1113f6e74e5e1465b7f2786c57ec038cf086e18e13b41774bf1e0077c288c5007924df665e489b9821451807d2c5ea0d97e76145b9aa9899125130d79d6905fcecd544dd134f01ec020d8c55f98e167870c333962bf2bfe3a7c8d0d9d911245fd6a4e595a55953b8cc8efc541c43226a2d4b785023c53d464996", 0x8e, 0xbfb}], 0x3000000, &(0x7f0000000200)='\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}]) [ 436.948094][ T9197] IPVS: ftp: loaded support on port[0] = 21 00:11:42 executing program 1: socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x200, 0x8, 0x8, 0xfffffeff, 0x3, 0x2], 0x6, 0x800, 0x0, 0xffffffffffffffff}) r1 = syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x4, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000, 0x1}, {&(0x7f0000001280)="534e60e5cdd4f204a19db15862b25ee8de3b45dd0d4a29f941ee633d3b7ece42102c8f644d3cbcf191d73b041d507110c13db9c983e5d135a7641461fc8205a264271ac9ecf3c6c4384e7682b0cd666b0af60f5070b2864c995cfe748cfad5a6a3362b6f314dec7b9e8c00c4a4dbf3cb41c5b1dda8967505bb79acd15a0dc9df321aa17f3d739066740f4b11f2f3c62b2a27ff5651805eed16d9b2be950f5771dccfc6", 0xa3, 0x1ff}, {&(0x7f0000001340)="e1bd54efa839ab53670cb56aad498cbe1ac8131384aef85dc65cabcfb96741257d6a55566230d79baeb29e679df46d0db98f12c24dab4eccca8a666b0a0e835d67defbcc62719ee9ad501b2c768426f945b7bee63494889c892e163fb993cb0643a53be2898f8657222c0dc87a2b22971f326755ed65ff41e48593e8364f116ee1e17c2e98023abcd36f6554bd549b", 0x8f, 0x8}, {&(0x7f0000001400)="d3d8e44bc7fd6e564bfc07ffd635d24e943de8a768cb5131a9c2e4d2d307148bdf0a89df007e79775d3241aaf30e4895d6a384db5031007de5651400bc9bc500accbb058126c0fdb8340da63fcf81a522a54b15c3bda7bc2e11b561a3248149fdbf7cabec476d6b9d40f6b38aef80ea8c61244e25f93", 0x76, 0x1}], 0x8000, &(0x7f00000014c0)={[{@usrquota='usrquota'}, {@usrjquota_file='usrjquota=syz'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_eq={'fowner'}}, {@hash='hash'}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f00000016c0)={0x5, 0x0, 0x2}) lstat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x100000, &(0x7f0000001600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@msize={'msize', 0x3d, 0xfff}}, {@cache_none='cache=none'}, {@access_any='access=any'}], [{@uid_eq={'uid'}}]}}) r3 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="08e1a489997dfb7ae4e7e2199a819edaf65e13cb8e19e017fffdefe5dc5f94a4f58e7f0f455a39693617a22984333361"], 0x70}}, 0x0) [ 437.334532][ T9285] ceph: No path or : separator in source [ 437.408860][ T28] audit: type=1804 audit(1599437502.335:14): pid=9296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/24/bus" dev="sda1" ino=15769 res=1 [ 437.488873][ T9296] ceph: No path or : separator in source [ 437.511613][ T28] audit: type=1804 audit(1599437502.435:15): pid=9285 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/24/bus" dev="sda1" ino=15769 res=1 [ 437.773876][ T9197] chnl_net:caif_netlink_parms(): no params data found [ 437.778201][ T9367] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "mask=MAY_READ" 00:11:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000800000009000100666c6f77000000003800020034000b800800010006000000280002802400010000000900000000000b000200706f6c6963790000080001000000000004000500"], 0x68}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 437.930693][ T9379] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "mask=MAY_READ" [ 438.079645][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.087304][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.097262][ T9197] device bridge_slave_0 entered promiscuous mode [ 438.111510][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.118996][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.128922][ T9197] device bridge_slave_1 entered promiscuous mode [ 438.187879][ T9197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.206967][ T9197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:11:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4ce1ff07a07e4f1e0000004a0306fb0a000200050ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) [ 438.277276][ T9197] team0: Port device team_slave_0 added [ 438.305331][ T9197] team0: Port device team_slave_1 added [ 438.383067][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 438.428832][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.436097][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.463396][ T9197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.524655][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 438.635278][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.643485][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.670265][ T9197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.709235][ T9450] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 438.719344][ T9450] bridge_slave_0: FDB only supports static addresses 00:11:43 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000082515a1a440000102030109025c00020100000024060000000000000000000006241a0000000905810308000000000904010000020d00000904010102020d"], 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000000)=0x763) [ 438.962498][ T3367] Bluetooth: hci2: command 0x0409 tx timeout 00:11:43 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x0) r1 = dup(r0) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000100)={'batadv_slave_1\x00', @ifru_mtu=0x88000001}) [ 439.067932][ T9197] device hsr_slave_0 entered promiscuous mode [ 439.103320][ T9197] device hsr_slave_1 entered promiscuous mode [ 439.142726][ T9197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.150442][ T9197] Cannot create hsr debugfs directory [ 439.524711][ T3226] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 439.775424][ T3226] usb 1-1: Using ep0 maxpacket: 8 [ 439.896415][ T3226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.908370][ T3226] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 439.918539][ T3226] usb 1-1: config 1 has no interface number 0 [ 439.925834][ T3226] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.938960][ T3226] usb 1-1: config 1 interface 1 has no altsetting 0 [ 439.993619][ T9197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.046182][ T9197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.094036][ T9197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.147865][ T9197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.204726][ T3226] usb 1-1: New USB device found, idVendor=1525, idProduct=a4a1, bcdDevice= 0.40 [ 440.214200][ T3226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.222778][ T3226] usb 1-1: Product: syz [ 440.227484][ T3226] usb 1-1: Manufacturer: syz [ 440.232366][ T3226] usb 1-1: SerialNumber: syz [ 440.553106][ T3226] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 440.584341][ T3226] usb 1-1: USB disconnect, device number 4 [ 440.950102][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.043891][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.044072][ T9041] Bluetooth: hci2: command 0x041b tx timeout [ 441.053162][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.088558][ T9197] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.179195][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.189527][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.199816][ T3226] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.207168][ T3226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.263825][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.273955][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.284137][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.293566][ T3226] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.301071][ T3226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.310433][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.321377][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.374372][ T9041] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 441.418614][ T9197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.429296][ T9197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.461229][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.472984][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.484148][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.495159][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.505544][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.516231][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.526645][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.536433][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.615410][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.642327][ T9041] usb 1-1: Using ep0 maxpacket: 8 [ 441.683427][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.695010][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.704326][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.712238][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.760802][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.772886][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.778799][ T9041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.791646][ T9041] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.800990][ T9041] usb 1-1: config 1 has no interface number 0 [ 441.807670][ T9041] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.821112][ T9041] usb 1-1: config 1 interface 1 has no altsetting 0 [ 441.863585][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.873435][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.900337][ T9197] device veth0_vlan entered promiscuous mode [ 441.916102][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.925954][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.965259][ T9197] device veth1_vlan entered promiscuous mode [ 442.053200][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.064660][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.083572][ T9041] usb 1-1: New USB device found, idVendor=1525, idProduct=a4a1, bcdDevice= 0.40 [ 442.092910][ T9041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.093864][ T9197] device veth0_macvtap entered promiscuous mode [ 442.101583][ T9041] usb 1-1: Product: syz [ 442.112324][ T9041] usb 1-1: Manufacturer: syz [ 442.117435][ T9041] usb 1-1: SerialNumber: syz [ 442.125734][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.135978][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.186307][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.208239][ T9197] device veth1_macvtap entered promiscuous mode [ 442.286645][ T9041] usb 1-1: can't set config #1, error -71 [ 442.315366][ T9041] usb 1-1: USB disconnect, device number 5 [ 442.388700][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.399749][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.409939][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.420693][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.435213][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.449600][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.459277][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.469905][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.507628][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.518623][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.530113][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.540839][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.555441][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.564511][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.575234][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:11:48 executing program 2: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x8d}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc97}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}]}, 0x128}}, 0x4) timerfd_create(0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') read$sequencer(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x50b400) ioctl$BTRFS_IOC_SEND(r1, 0x40449426, &(0x7f0000000080)={{r2}, 0x2, &(0x7f0000000040)=[0x0, 0x8], 0x1000, 0x4, [0x1, 0xfffffffffffffffd, 0x3, 0xf27]}) 00:11:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="9ab40fa18dbdff25e025255b52ea4ede7e191b60bf5cd5a3fec9c72cdfd60584aff890527a05a1c3abfa68b7785d4104ac17235414149d4434d195e9b228c6b5520b6495bb2ad8f24f23eca6395ef61df1c493765c1fdec07a3a6d75c7df0e3f55b5d33f710fa1da498fe4d323c1feaedde1cadfb0d1c5a7701e5fadac1d81a29d320809de1cde032479a8d818b52773759369bbb1b810d91802fa17226d3da6cccb0cd4", @ANYRES32=r2], 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00f53100000001", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000280)={0x1, 0x4b, 0x3}) 00:11:48 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101010000000000000002000000", @ANYRES32=r4, @ANYBLOB="ff000200e0000002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 443.122938][ T8720] Bluetooth: hci2: command 0x040f tx timeout [ 443.271257][ T9545] IPVS: ftp: loaded support on port[0] = 21 [ 443.604095][ T8720] usb 2-1: new low-speed USB device number 10 using dummy_hcd 00:11:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r1, 0x2d, 0x0, 0x0, {0x24}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048090}, 0x200048d0) [ 443.892290][ T8720] usb 2-1: device descriptor read/64, error 18 00:11:49 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:'}) keyctl$describe(0x6, r1, &(0x7f0000000080)=""/97, 0x61) [ 444.305746][ T8720] usb 2-1: device descriptor read/64, error 18 [ 444.595175][ T8720] usb 2-1: new low-speed USB device number 11 using dummy_hcd 00:11:49 executing program 2: mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x800008, &(0x7f00000000c0)='*.@*\'\\\xf6}\\-[$$\\\\-#*+$[(\\w\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 444.889767][ T8720] usb 2-1: device descriptor read/64, error 18 [ 444.951736][ T521] tipc: TX() has been purged, node left! [ 444.979262][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:50 executing program 2: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) gettid() clone(0x68022980, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 445.196081][ T9539] Bluetooth: hci2: command 0x0419 tx timeout [ 445.292647][ T8720] usb 2-1: device descriptor read/64, error 18 [ 445.428146][ T8720] usb usb2-port1: attempt power cycle [ 445.634803][ T9592] IPVS: ftp: loaded support on port[0] = 21 [ 445.977864][ T9605] IPVS: ftp: loaded support on port[0] = 21 [ 446.193169][ T8720] usb 2-1: new low-speed USB device number 12 using dummy_hcd 00:11:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x2, [0x1f, 0x80000001, 0x7, 0x100000000, 0xbd5, 0x800]}) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty={[0x2]}}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}}, 0x0) r2 = gettid() tkill(r2, 0x15) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x2}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x11, &(0x7f00000003c0)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r6, 0xe7}, 0x8) 00:11:51 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="020185ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffbf000000e100e2ff87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0x3285}]) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x10000054, 0x2, 0x0, 0x7, 0xa4, 0x7, 0x7, 0x7fff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe4) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="5dc0d2bfdacd55868e81f4031c2e00adc4bd5c0f1c81f7f636d9837bc15ea20feea06c3f56f9967e6396ab547a8594c2fd6014336634eb836a9a6343d649f81a6a29e28f8ea532e7a3eb55d3497e51818e90ca02e2a01f963efa1f2119dc9e293bfbd05b32983a9e54b8368aeb", 0x6d, 0xffffff81}], 0x8001, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r0}}, {@dir_umask={'dir_umask', 0x3d, 0x1}}], [{@appraise_type='appraise_type=imasig'}, {@obj_role={'obj_role', 0x3d, '\xba}\\,'}}]}) [ 446.484626][ T8720] usb 2-1: device descriptor read/8, error -71 [ 446.692169][ T8720] usb 2-1: device descriptor read/8, error -71 [ 446.918331][ T9647] loop1: p1 < > p2 p3 p4 < p5 > [ 446.924468][ T9647] loop1: partition table partially beyond EOD, truncated [ 446.993054][ T9647] loop1: p2 size 100663296 extends beyond EOD, truncated [ 447.061009][ T9647] loop1: p3 start 4293001441 is beyond EOD, truncated [ 447.106267][ T9647] loop1: p5 size 100663296 extends beyond EOD, truncated 00:11:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r7, 0xc018620c, 0x0) 00:11:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="b5eed4af010400e3ffffffffffffff01c2e73bb86d0320081b4bca9e4c99b308c91f904ee4fef138cefac1df3362e4713a5abe4a41846258dad80d3b0851a2f2fe2d55465f9cc2d03e02718d1832bb104e84e379d33245b921cf9050f199a44c494a8065d46d8c19e1cfce8d25051dd2e04cb23dff7f2cb1541fbd0bfeebfc349751f9475cc8d008542caaa5f80f00aeb21eb47673be1b2d3fd61daeee90a90a2c605eb630ae34a4ebeca9bac8454341a33b5aba6eded93a33365161d7b9a2eb0143907b750f732d917764d13c95538ad67a747b635db1db025d80949930ac608cd49775a46f9c9288bd1c795e2512a4dd29871d40fd5da576ae7345cb3bb158256ac941fda0c2901b03e82c4afade325d259b8c69ab588ab4f79e216254ab1cf900a507a3ca4ad210e5573990e69c78bfd00d8211f6e103e6ccf9a6f8ea3fb89bdf03c590f63ed6cca19b7cc70c1aef048c6eea2278c310c5f1aa650403f99e735111155c85a9424cd7238b69c6167e7674e1db71c7c40a6c5044cf2573544a94ee21993c46e59e6c7fb67ef2205299bbd0320cd1cf14c97ae910772147612442de473f03794005a138cfe061465c4dc10391b925ffeb57b24ee3e354fe71efb274bbcd61b534b75f7e18b46f7fc81b2db23d02f7b4fde04530eb2a6621273e5dc7ed5189d46ed34ff267e1fdfddc07bf0aeef82084023bcd400cb59a7542e5e72a86fc08b3e39f90d5f794c0bdc1d3a52000dc8ff9e3c423cf59c1b0000000000000000000", 0x226) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000380)="9510663d3a9c7318a246dcc7be479cdc", 0x10}], 0x1}, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0x16) [ 447.304367][ T9656] binder: 9655:9656 ioctl c018620c 0 returned -14 [ 447.428524][ T9647] loop1: p1 < > p2 p3 p4 < p5 > [ 447.438270][ T9647] loop1: partition table partially beyond EOD, truncated [ 447.509996][ T9647] loop1: p2 size 100663296 extends beyond EOD, truncated [ 447.553932][ T9647] loop1: p3 start 4293001441 is beyond EOD, truncated [ 447.584927][ T9647] loop1: p5 size 100663296 extends beyond EOD, truncated [ 447.714703][ T521] tipc: TX() has been purged, node left! [ 447.732472][ T521] tipc: TX() has been purged, node left! 00:11:52 executing program 1: perf_event_open(0x0, 0x0, 0x807, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000140)={[], 0x0, 0x465, 0x1000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000001340)=""/185, 0xb9, &(0x7f00000000c0)=""/35, 0x2, 0x2}}, 0x48) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000400000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000180)="11fe323d76964f07af012c396d3708ad285dc7d2cae4d011949f77affbd2def05553657b4021732b0aeb9ef3c08d5f2a288d0c384f6ac234d20948e227019b6f97021bc5af43ddf0fa4acaf56df5db58a0b73777cc88a02b254b90f07581991e02a68ba037c416e344ed61e88b50324917d709b12c119491d71ff612a16639a9b9f4c2eb6244f3fdc5389adf06cd7df6e101652f7440c928553764b7da0961583164fc045527c0c2c01c606ede6e52c46f79fb0d61bf46b3de7a20d72287b7778b7363abb1fd4b64eb5642e836d003ed0d2c461af94c7273bcfceba62dbb7aee126fd70393f8b1cf37c27579ce1cc83001dec49ed9e6b2", 0xf7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) pwrite64(r4, &(0x7f0000000340)="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", 0x1000, 0x43dc) ftruncate(r2, 0x3) 00:11:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) fchown(0xffffffffffffffff, r1, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x84, 0x72, 0xf0, 0x40, 0x424, 0x9505, 0xd700, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xd2, 0x46, 0x37, 0x0, [], [{{0x9, 0x5, 0xe, 0x3, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x200}}, {{0x9, 0x5, 0x9, 0x0, 0x8}}]}}]}}]}}, 0x0) 00:11:53 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/136, 0x88}, {&(0x7f00000000c0)=""/196, 0xc4}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000500)=""/220, 0xdc}], 0x7, 0x76, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000440)={0x31}) [ 448.822491][ T8720] usb 1-1: new high-speed USB device number 6 using dummy_hcd 00:11:53 executing program 1: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000900)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf5d7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x68}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000038000505d25a80648c2a940d0324fc6010020a400a090e60053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) [ 449.223825][ T8720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 449.237048][ T8720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 449.249356][ T8720] usb 1-1: New USB device found, idVendor=0424, idProduct=9505, bcdDevice=d7.00 [ 449.262042][ T8720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.402984][ T8720] usb 1-1: config 0 descriptor?? 00:11:54 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6548d9109b9f27ef07aff7b092af6ce67598791700dcd282850fa3e1addc80d0bcc7c260cfe14cd22cb274f5003146dd531c13bff0256977741437a0d53e3d480cb1af22803ee6bee3aab91407000000db57d4a90353b026b28e48c604ab4e958e5af4f14f7d25dcaab053d0724a000000000000000000000000000000e8894043ef8cc6b777a72eeee43e2520fb8566c88238b817ed1e65a74f616e58db940c89d80f2585"], 0x191) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 449.446094][ T8720] smsc95xx v1.0.6 [ 449.450906][ T8720] smsc95xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 449.464080][ T8720] smsc95xx: probe of 1-1:0.0 failed with error -22 00:11:54 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x68, 0xcb, 0x1a, 0x40, 0x424, 0x9530, 0xd46c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x4b, 0xb2, 0xe7}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x71, 0x84, 0x38, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x40}}]}}]}}]}}, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) [ 449.648314][ T12] usb 1-1: USB disconnect, device number 6 00:11:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20006804000000000000005c81883f435c68aee7f03c0c45b23c001f87b9ff0d2600000000000000004228b9f6082e03c3063c13a2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 450.274812][ T8720] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 450.431921][ T3226] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 450.503756][ T9041] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 450.662741][ T8720] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 450.673516][ T8720] usb 3-1: config 0 interface 0 has no altsetting 1 [ 450.682350][ T3226] usb 2-1: Using ep0 maxpacket: 16 [ 450.802624][ T3226] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 450.818790][ T3226] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 450.830375][ T3226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.894161][ T8720] usb 3-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=d4.6c [ 450.906177][ T8720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.915948][ T8720] usb 3-1: Product: syz [ 450.920619][ T8720] usb 3-1: Manufacturer: syz [ 450.929918][ T8720] usb 3-1: SerialNumber: syz [ 450.942880][ T9041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 450.958370][ T9041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 450.973849][ T9041] usb 1-1: New USB device found, idVendor=0424, idProduct=9505, bcdDevice=d7.00 [ 450.987003][ T9041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.002242][ T3226] usb 2-1: config 0 descriptor?? [ 451.010426][ T8720] usb 3-1: config 0 descriptor?? [ 451.020223][ T9041] usb 1-1: config 0 descriptor?? [ 451.055392][ T8720] smsc95xx v1.0.6 [ 451.056199][ T3226] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 451.060016][ T8720] smsc95xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 451.083600][ T8720] smsc95xx: probe of 3-1:0.0 failed with error -22 [ 451.106643][ T9041] smsc95xx v1.0.6 [ 451.110835][ T9041] smsc95xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 451.122236][ T9041] smsc95xx: probe of 1-1:0.0 failed with error -22 [ 451.251134][ T9041] usb 2-1: USB disconnect, device number 14 [ 451.310375][ T3226] usb 3-1: USB disconnect, device number 2 [ 451.312175][ T8720] usb 1-1: USB disconnect, device number 7 [ 451.863203][ T9041] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 452.091763][ T3226] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 452.123654][ T9041] usb 2-1: Using ep0 maxpacket: 32 [ 452.242674][ T9041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.259195][ T9041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.271842][ T9041] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 452.282313][ T9041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.453319][ T3226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.463256][ T3226] usb 3-1: config 0 interface 0 has no altsetting 1 [ 452.515236][ T9041] usb 2-1: config 0 descriptor?? [ 452.589451][ T9041] hub 2-1:0.0: USB hub found [ 452.662785][ T3226] usb 3-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=d4.6c [ 452.674201][ T3226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.682793][ T3226] usb 3-1: Product: syz [ 452.687166][ T3226] usb 3-1: Manufacturer: syz [ 452.693240][ T3226] usb 3-1: SerialNumber: syz [ 452.774270][ T9041] hub 2-1:0.0: 1 port detected [ 452.814207][ T3226] usb 3-1: config 0 descriptor?? [ 452.855138][ T3226] smsc95xx v1.0.6 [ 452.859706][ T3226] smsc95xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 452.874818][ T3226] smsc95xx: probe of 3-1:0.0 failed with error -22 [ 453.235366][ T9539] usb 3-1: USB disconnect, device number 3 00:11:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="67726574617030000000000000000000c1fa4bf7615593b6055324060aa860ff511531ae42d5a75592b460dc3c000000000000c041e1bbd7c40c941f8e81a306dcce0cd23a6176099d935a2757db14522ad73ca07b612b547b9bd6407e0a2fcef5f6cf15f5eb596ec9b5f7f54940ce5b4c4000aef36ba89d5b76cc8d2965a7ad2fd597faf9f659bd", @ANYRES32=0x0, @ANYBLOB="000000000000004c000000004500001400000000000090b691376c017f8b89020cb71a3458b018fa506800eb850e2683893ba3d06996e80c4eb2b00a6c2609bccd0d71e2fb6ce3cf20185bca6861014ae5916bc2db26e097153d2b59f5b109260bece335cace727c4cd3606144b580da1238a74f4eea14052e61d8ce6f3deb39cbd5ee4f8861a037f524fa62cc9c223d7cd02e5250eded23792f279d5a3ff2ed1e5cc05ef7c23c3049c016120feba42b951bc2eade2ce78e713039e67ae1bc8010c1793b146e62874311d97a5b2e3e1ebe41ad1d20f2c74ed9b9dd99"]}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-'}, 0x16, 0x1) msgget(0x2, 0x11) [ 453.338576][ T9041] usb 2-1: USB disconnect, device number 15 00:11:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002"], 0x44}}, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x5865]}}]}}]}, 0x8c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xffffffffffffff74, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="000000000000000008000a001000000029320e8d73ced34d"], 0x28}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 454.124292][ T9041] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 454.393002][ T9041] usb 2-1: Using ep0 maxpacket: 16 [ 454.524281][ T9041] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 454.539806][ T9041] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 454.551915][ T9041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.588779][ T9780] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.643235][ T9780] team0: Device veth1_to_bond is up. Set it down before adding it as a team port [ 454.689108][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.719916][ T9041] usb 2-1: config 0 descriptor?? [ 454.753079][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.828241][ T9783] team0: Device veth1_to_bond is up. Set it down before adding it as a team port 00:11:59 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fdatasync(r0) io_setup(0x83, &(0x7f00000003c0)=0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000100000, 0x8000000, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x7000}]) [ 455.004407][ T9041] usb 2-1: can't set config #0, error -71 [ 455.033727][ T9041] usb 2-1: USB disconnect, device number 16 00:12:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3671c6e7346d0af945d060ce86d3b5cb34a5711c5b99f9a547ea756197008274531e3e14e255558d9f21a93f7ef73698bb946b8ece116d62d498936fba3527a147786bd95f4e872e4b7a530398a990f8a91f677893c25844bf0935f52b3ec39777344a7a75d8cc1736fc96d90d1d3a70b719766a3c7b3a1cbc57150ee13f827a4476835dec8589", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677735fab00f34c3a558860a726f75705f69643d", @ANYRESDEC=0x0]) lremovexattr(&(0x7f00000001c0)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) [ 455.506460][ T9793] fuse: Unknown parameter '6qÆç4m [ 455.506460][ T9793] ùEÐ`ΆӵË4¥q[™ù¥Gêua—' [ 455.568258][ T9794] fuse: Unknown parameter '6qÆç4m [ 455.568258][ T9794] ùEÐ`ΆӵË4¥q[™ù¥Gêua—' 00:12:00 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x8006, 0x0, 0x0, 0x2e2}]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x20000044, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f00000012c0)="1b6a03927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec6626", 0x8204, 0x20c49a, 0x0, 0x27) 00:12:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x4}, 0x1020, 0x0, 0x10001, 0x5, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000180)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) sendmsg$nfc_llcp(r1, &(0x7f0000000c80)={&(0x7f0000000500)={0x27, 0x1, 0x0, 0x0, 0x4, 0x0, "a0379a6cc42ae6e37d49521902df237ac54aecf722c473967209c8871fe67f573dfe4d195dc2593901d373159ecec7de776db1fa2e1e3202a7750aa89ec469", 0x1d}, 0x58, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) write(r1, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(0xffffffffffffffff, 0x0, 0xfffffffd, 0x10000) sendfile(r1, r2, 0x0, 0x11f02) dup(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0x1) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000200), 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4, @private=0xa010101}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @private}, 0xb0c4}, @in6={0xa, 0x4e22, 0x8000, @loopback, 0x4b7}], 0x90) r3 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000001c0)='.dead\x00', 0x0) 00:12:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = socket(0x2, 0x2, 0x0) r2 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[], 0x68) shutdown(r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000602000/0x2000)=nil, &(0x7f0000603000/0x3000)=nil, &(0x7f0000602000/0x4000)=nil, &(0x7f0000605000/0x1000)=nil, &(0x7f0000601000/0x1000)=nil, &(0x7f0000602000/0x4000)=nil, &(0x7f0000604000/0x3000)=nil, &(0x7f0000601000/0x12000)=nil, &(0x7f0000602000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000060f000/0x1000)=nil, &(0x7f0000000180)="1d1b3910b3a344e97a48cb647f7cc2385d5e467243f41c1e88f86beb5cbe54679273205b5c7b8eab42978a42cdd74ea2b04c88774810adfbac9cf0cbb6c830af7eba92c5011e3c766282412974431d0ea18fc84b8a8e382683804c99e22367c90e03bbfa0500e81142d8cf31da03ccbd36e1f24c4e1142a469c57801924933ff8fa7d0f47ce9af4e5ac62f31437467b5b8c2142f9538551a", 0x98, r2}, 0x64) syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)=@gcm_128={{0x303}, "de77c514c81c4de6", "6e8ae5e727c8ab228adcfcdda0070074", "4387599f", "d71286efd84fe421"}, 0x28) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x960101df, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'team_slave_1\x00'}) ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x0, @private}, @in={0x2, 0x0, @dev}, @sco, 0x5e, 0x0, 0x0, 0x0, 0x5}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendfile(r4, r0, &(0x7f0000000040)=0x100060, 0xa808) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="6800000029734fcc57af4000000001030000000000000000000000000007002e2f66696c65300002000000040000100000000000000000000005005407002e2f66696c6531200000"], 0x68) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x1, {0x401, 0x8, 0x1, 0x2}}) [ 456.180330][ T28] audit: type=1800 audit(1599437521.096:16): pid=9801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15816 res=0 [ 456.373695][ T28] audit: type=1804 audit(1599437521.296:17): pid=9801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/11/file0" dev="sda1" ino=15816 res=1 00:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000340)=0x654, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x29, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xd4}, 0x8090) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$ax25(r4, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000fb1400028006060e0001fe000008000100", @ANYRES32=r3, @ANYBLOB="69695d8be74175b1d847f2aa71fdb9ca1875090926f81aa4ba15e25813912933169c50096afbae7cd9987118522517483d420edbbbc884cb76a071a16b9dc6513a6c4bd737e3b6db08ec2ea0f8d7596be9cd0420cc186c9d7b4aefab5f3982c3dabf4b9ae5c20af825313d3d018af8655688a96b0b9279ef44fcb87c8011be5eebfcd785639bf7f036cdb800"/151], 0x40}}, 0x40d5) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x1ff}, &(0x7f0000000280)=0x8) 00:12:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000000101010000000000000000000000403c000e800c00028005000100062000002c00018014000300fe8000000000000000004100000000bb14000400ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 00:12:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000006c0)) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80000, 0x0) r2 = dup2(r1, r1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000640)={@private0}, &(0x7f0000000680)=0x14) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003f0100003f01000006000000000000000000000300000000050000000300000080000000060000000900000f010000000200000009000000040000000200000002000000fdffffff050000003f0000007f000000050000003c0000003f00000001000000001000000400000002000000080000000000000003000000060000004000000004000000000000005117000003000000080000007f00000067010000000100000f020000000200000001000000040000007a46000000000000000300000000030000000500000005000000000000000000000300000000040000000100000001000100030000000000000700000000080000000000000c030000000000000008000006040000000500000000000000040000000000000006000000080000000d00002f8d0000000f000000060000000c000000070000000b000000b00700000b000000030000000000615f716100"], &(0x7f0000000300)=""/208, 0x15e, 0xd0}, 0x20) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r4, 0x28, &(0x7f0000000580)}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000004c0)={0x1, 0x0, 0x1000, 0xb4, &(0x7f0000000b40)="cbdbec22002afafac88aafeba6201cd64baa58a088e0f8e47ef5b7b1741efd3b2e41d4b21a2dcb1c71281aa7069462242f79ee2e0549305664d1ddd55f27c0cb4e24094da87ff733cefaaf7e47636992f79ec07da03b30377eab765e707e514de3369663a2055e234f2c1e9d59dbbbf4fbfa5e1932fd6992f5075ed613752ae77f71b5131376bd2ac6d81d607ae0e6c8f5bebd9bd7540a44fe5c41464ca44964a4fbdc83dfe24bc81e5e96ae1ffee8c01d9b467f", 0xbd, 0x0, &(0x7f0000000400)="ab3e1a5640b80f422a49435781bc1dd4b98804f6a05bb484fe671886faa9d4c38a63a059f7b70736906b623dc9071e35eb579f4d78b4b1d03c9bb6500e0ec8a4db86ce946044de54c82af94fdfc78aec690002f3a77c9ae674eac82181a888157e07902907aab303d95092bd942b578ac6c8a84750e83dafc6a3c53be421c7856197feff88c4529d2709fd7bbcf5361d94569e905f0fa0f34d0f37abd5d2d4e2b2a70e7bac3becab6dc5a1f585c92dabc39afab7fc66638f5b251b4da7"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="2e000000101c8108040f80ecdb4cb92e0c480de40d000000e8bd6efb25030949732afb00250d48ff05000500120124edb78961d31756cfcac1cf62b3cd98", 0x3e}], 0x1}, 0x0) [ 458.602519][ T9819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7184 sclass=netlink_route_socket pid=9819 comm=syz-executor.1 00:12:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087d1e32320000000000820300000000000200"/41], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)) syz_usb_control_io(r0, &(0x7f0000000180)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000052000000ffff"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 459.223822][ T9539] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 459.481657][ T9539] usb 2-1: Using ep0 maxpacket: 8 [ 459.545205][ T9539] usb 2-1: too many configurations: 130, using maximum allowed: 8 [ 459.678872][ T9539] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 459.690966][ T9539] usb 2-1: can't read configurations, error -61 [ 459.872844][ T9539] usb 2-1: new high-speed USB device number 18 using dummy_hcd 00:12:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x8000801, 0x4, 0x3d4, 0x2f4, 0x1e8, 0x1e8, 0x2f4, 0x2f4, 0x2f4, 0x4, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x420) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000140)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x1, 0x1, 0x0, 0x4}}, {&(0x7f0000000000)=""/232, 0xe8}, &(0x7f0000000100), 0x20}, 0xa0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, &(0x7f0000000880)={0x1, 0x3, @start={0x0, 0x0, "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", "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"}, [0xb302, 0x0, 0x5, 0x3ff, 0x7, 0x7, 0x40, 0x401, 0x101, 0xffffffff, 0x5, 0x7038, 0x4, 0x4a, 0x7a27, 0x40, 0x7, 0x200, 0x4, 0x36a3, 0x4, 0x9, 0x0, 0x81, 0xc6, 0x4, 0x4, 0x0, 0xfffffffffffffffe, 0x5, 0x10000, 0x0, 0x3, 0x9, 0x2, 0xfffffffffffffff8, 0x7fff, 0x9, 0x3, 0xffffffffffff0000, 0xb79b, 0x8, 0x5, 0x3, 0x3, 0x80, 0x9, 0x8, 0x4, 0x8001, 0x800, 0x948c, 0x3b, 0xfe, 0x8, 0x401, 0x5, 0x80010000, 0x3ff, 0x33, 0x8, 0x5, 0x8, 0xfd]}) [ 460.114305][ T9539] usb 2-1: Using ep0 maxpacket: 8 [ 460.156300][ T9539] usb 2-1: too many configurations: 130, using maximum allowed: 8 00:12:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x83, 0x4, 0x8}, 0x40) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x10) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x92800, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f0000008680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10, 0xffffffffffffffda, r4}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0)=0x1) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) syz_read_part_table(0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac00000000000500e931190000000000000680ffffff82000000e100e2ff877700720030070085ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 460.283822][ T9539] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 460.291890][ T9539] usb 2-1: can't read configurations, error -61 [ 460.331212][ T9539] usb usb2-port1: attempt power cycle [ 460.465143][ T9836] loop0: p1 p2 < > p3 p4 < p5 > [ 460.470519][ T9836] loop0: partition table partially beyond EOD, truncated [ 460.478529][ T9836] loop0: p1 start 10 is beyond EOD, truncated [ 460.484898][ T9836] loop0: p2 start 25 is beyond EOD, truncated [ 460.491456][ T9836] loop0: p3 start 4293001441 is beyond EOD, truncated [ 460.498476][ T9836] loop0: p4 size 2 extends beyond EOD, truncated [ 460.509956][ T9836] loop0: p5 start 10 is beyond EOD, truncated 00:12:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:12:05 executing program 2: socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x10, 0x2}, {0xffe0, 0xd}}}, 0x24}}, 0x0) 00:12:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x19e0, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xfffffffffffffdcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xbf7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) sendmmsg(r0, &(0x7f0000004d80), 0x5e, 0x4000000) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$VT_RELDISP(r2, 0x5605) [ 460.981953][ T9849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.017880][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:06 executing program 3: ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80041270, &(0x7f0000000000)) ioctl$CHAR_RAW_IOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) r0 = syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3c2, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000100)="dab019e0640ffe754a3cb8312cf7848a7d8567082eee470e40de76891f68619e010e1ec81579ccb9a9ae5366ff0e18cc34b5d68176c1f92898edc28d2e2429b04d8a15e23bf2e854214894e67d29cb496092d433091bf65e6bfc906e768c9580a169c34eb8c02a42140cc334fee85423302a6f2158f513d424f602ee4ccca96689e185c156cc49244321a1abb6a26b198dc9605934ba11497b63ff96e7893a416223e58ae4ab63a61a2f8755d853613ed05d3b9061cd7b80668e3dcc88fe322dcc8b9fb49825b71890", 0xc9, 0x9}, {&(0x7f0000000200)="edaccf65b6100c58e6ab6cce604aed7951a7ac27952ef0e519aca80828a31064e0193ff40c01a59e53e7fa5c2a3e3bc82c5ce33ed103498f882c7700d8ba72afb99900852dbd98c82c7cf1c22a7141c4958122b360f50b63766530b43c1141ad425fa225bc12f070", 0x68, 0x1000000}, {&(0x7f0000000280)="ca611cd382dc54c0c4319785a13d0f11421d44bda5fc24ba7219019ba1a9a9", 0x1f}, {&(0x7f00000002c0)="cedfe9f94120ba6c99428d72edc0acd499d6e1a6d24df4bc84034665a0028dbb6a9f847ff252bcaa9735e44ba442c5e43a8b2947e2934ba1063240caa4a0b34918fa31c4e7f89b62fc6ed667d713de0306d3f1e595b972c1a4a901a24fe8e8f042f029f2d981760babd668226c4436163fa8691349485021796699b7949c57e95fa2673975a7b53505a58ac184632c7e5194148f79d097d83194cd6a829c36a6c28261dc6743a959619c3d4a9195dc7ffbc41188b46373cbd1ea057e94e06949fd7380c4799a537ae8e4dc", 0xcb}, {&(0x7f00000003c0)="4cb23d82f9ae40ba95880689a2deac895b0d31b93e00debfb7961447cbbe5dfd8bea4e6a18c02b238254bb1a466072a446f91f2b272f3a38e7bb08f965784158fe515bdf21c88a6258073ea76a5a27ffd5f0bf9f82aa930579075ec89a7a7ef7cda9a9a2a046c07970d634f9630d78200953132cf3de76393b5bc1030bb0da8670be59689a04254b2796911927eac63ad2da3ab9ea9c31c502f6b6240ddff2313df59b400a57916d2d356c908857b7eb5f0c7f63d61a81d39b53c9dd18bae8f68af173b709d91a908a35242a7d5c06a66c67f0b7a1f514c1f59be50302c5e48e0b600f951035f916346201a925828649cd9a1b1c50209a36a1168bedc614b5ccd4cbb2f3ecfa26107a0b6ea104a6db6531efc2a26213ee34c7972ea5dc8ad809b39a48f9e59be31c91bbe0a4cff7365dd5465dfd23b1c1b0503fed8447c35234cfb73ae4c1a851ed99ddc66b6fcaa9f59510930821816aaf1f6bf7ae31b7af340a4ab257bf4c0cb0d9fce4b3895fac167d6ee7b9b4e264053715d358b3d6277abbaafcbc00239743fb26805ccfda8fc380b1de13d43346b3bd15563eeec0c0a8e1a4272f766ea0772ba2f843e0787e77b1304858eba28c75b8d2773175c2e3e132429fca04dc4cc29e3ff47d2630b51aba71ea0e1a0647f0f76148022e8330f78c02216279469f15644584cdf345b60d80e4e185a0bb0c6138a1a637bf652bef5c16e36b3dca8634ee35b2e2d626b71d0549726828f1a0b1d1ff6e9b20553beff4aac05a7b93a7bc9f4a33644c9e0d39e51bddf153473821672251bd23cbbb47e58aa9d1c9f59cc62ee51f56cd4436d3f948528d5faa8d2e6c56c7c09eccd4f6a8d2928db7623b003726f49a8cde410a413c04f0579d0cc447ee43af71e75c3700cbd9ff79df05e65af23019b9257a6d74dbd623eb3a5c7ffe041fe5d510338e15db9100dc5e969fbafbbcc19816c09699a143a9da09741a7f8a6a93be5e6f4c215ad2e89eab1cfd4cedcbdb3feee3ed34456e93a87b16871e5f42002d01b726d814d9841240516f86897b70edf5be02d1c7bb0cffaa0ca10c1a6991ade676f3031c25ebdc32283996a4312f8f77508afbdc7ab985bf9d2287b712cb9dbf1c410e79017c4142812ae6f52aecf726fca857e562624f8f549d57844d352a302d1899f4b0ed274c5d6d8369cb763fa91489e101a6f9f1632b3ddcb9d2e66a83110a9eac3c3f8885ba0839daf7cb66793105e56a75f4a0a697039765cbd02565e7f5a48935e98c3bba9d80279213a7a744327d5ec8fdb03a8f5625477777dd0c5a4925aebf98cc3c28f65cc4708fb07e06c89ea9e3b381460eb50ab2aaed79474acbe14bf802f6e6ba4d16633df4f36a74ecbb081387cb03b153131f457eb166699f9831026eb73fbe12ae9fbb11dabdc537d8b728adb859f30f84ddc76931ae9e9fa7f9f7327a9f223743055e49092b5d27234c75108e69a7e10c0dd5a7f2725882cc9aa67e96d1823b617c3439fc52dad7b2f8881b838933798b2ff8586f271e89aa7948dca8eea5b8e2db52417ae03daefd7a7951a933ad950e2aa18bdc6a9870a0c56ce4c3779819728f9ca90c22a016541114643128368b07a8761821a26926b0a6c4f0884862364ecbca176f329ecc11827b8930c45d21bfd1e4b6de63ef2abc272f92f24d00be3b459d44bc13df5492783c1e42596b944c24850e5c8474af9b31369b15bd4646dbff4c36ccba528b07e53c50a003aa013b5a13aedb4fa275b894078d66d1e90b464339ffa42cd4dd7a6e54eda913bebc16cd8490220d4bda1269b7040c4ef9ae0a409e5f7ff1453740eba3d13ceeb9a1c1ad991ca879787f82f63413bcaa67f3ced7e91595d55f8dc83b2e4ffaac59a19ba47c623bb379b3eb8b7d9b5bd4f8b902069fe64d2d2af05066854787b48fb2d34c6dff27f1d441cb23665683d16d44393f5a30022df5944d1a7ef2a4619920d1855a39682963af90558e55a7b2531d8131946d3f1d4ac00b1308147fdde6baba9c01f5479d4b38c1c26fa2d58e31e18a8b48245ff3ecd12c632120f51d8add780e2c08c7cd1d7e01cfb7c5a4fc61a56f44f0eb878d8a5a191026d741acc1deaca6cf719bb3aff6153dcfc88c5aa12a29ce6dba56208120d38091b8c7f6270f52bdbb160bff76f98c3a07202ad20a1b81865d350f29d6ea84f61c394a1a040360b52e17a7cabd278239ee99b8f63cd004fea28c861c663387967d00176dfd7a1314569a7bfe74f8bfcaaae58fb9bf074057b6571f00eb516a133835f54fe37c97ca70d094eccdd1ea489900e7a9ebd3b83196772b8419f88d4033f5c02bb279510fe64ca35bb0c22ef39914c4269cfb9c06bf568c430016a7187111dedb2cde4c798904955da6f53a54efb0032596c9960ddd7bd5854b49b33b1318d583233f0c2b16248ef8638c969848e4988e37fd6c14b7382b68e472901533e8eddb88694de55d118df0b43a00de00ae20a4e30fa976be3fa43a80c17890c6008ce97b61fb0d844c1d454a3d4702128405c8b46355f002772aeb530872c958497a9567563f0694b9b984d8711bba9131f79160df02adebfad2fa56c40dbe898e9d62f8782a17ad7ddb29911ec88f23e4d1007944be4d13fbc650dcef6613b853f94e76d5d5c4e8d9656adbfeba22174583eefeeebd3529f0c2da230ebc8d1ad5efa14aac81514e3ef1a3049befc154f09f271f81513a247c2102e978fd5c4393c11ec837a01968fa0a05f6eca124b3cde5d7952ee5eb5fd731c04ef75cc09b776493d76915040c046daac6166c1a9197ea42c75d7f665b1951848cb1a6158bec4631ae0883c74d20628e1774c71e6bdb9b40f9099ae2539c2ed8b1c04d08f3808b065f9eabaa6b05dcef734183e8329c8ebdca06ec4331e43f0a1776a1682308a290a62c7281f9ca45486954d72a8efd46dc3ad79b30f21c4743dff2824192d3deb86f0c86d21e87ae81f16b01dc8715e83e8d214698d2049d5d49659f5a48ebdaf910cc0179631ffa3c4a68296d34e2260369f75c32f9f7033b555ff4d75c615f87f25fa3ec4dd1ba7f01a547aa27d2cb2c714fab23ded55a57d78b316dc26b5d9da13295a7d5a07b96faa843a842d24c8026088f577087fbf55661ffda59a91dc9542cf855bcf4c3ff91383ff5c0832050668f9bab7b388986a353579f0f51c29dbb196c66b2fe740146bba43f294f13e22d4a0f431eda6463a4bf8d392f4ab6c71f458323e6e9fad5cdeb143db9f6a621d0f5ab8926418b2738277c9601081fb2fdd7310368c0dca396ad0fe94dbb97d98d124029ba24322abaf96a0b127cd9ce4588bcf841800cfb7edfd183efb278c1c819834411c2c22e426afbc8dd13ff64a0892fcae4f04ae89b9068b2de4eb38f5d65bc03f18e0b4d45bc3282b7af788d5aa9fef1ecb37cdbad701a860953f3c067f50c8fe71fcb11440e64d039c435c4a49c6759a0b9feec76a01b5551946cd7e25f80a8a29cf0578561bcfbfb3b20c256fbcd7730d6f2d6f31184161fdd971bb7116222467ecee60d4ec65acab0246bfde7e1e9e96cdb8d219215ab8faf78e11e0d5491e2d4015e7a4418e7d3eb6ddb1acd63773d28e05b4f46e3410615214cf60531e2fb18a948cc2aabb0b41d897d8be5fab88d93ec513ea4410e2eeb4ae60f7c3d8d1cba4469543dc29bd593ec45e211da8e4a1cb3499e8218d6e7aebdd2d8df6b10947058bebbcbe8c4037bb9d75f74c3ee4aeeb2366fc6522e646bd1c96a8ccd61ae23fa615f3cf98bbb80de59bbcfe6b6cd36d675a21de6c07ffd8bb264f5d9f10d33f75bce2fb1ac5ae70c62ccedc72b1795a1bc7c45ebebe62103c3e5ea34395d3d17475116fa63402c8e7ca3e3d8e4c89cd93ac0afcff0dd223e8abab22ec76e33124735e8e8e1787f65897a5bfeaff401fecf8c54f9ed2c96dc96bba80abfbe44c4b31953ffd717ed4d1a14b3b429315d6afc06bdec5aba1f6c93e4a925d4ff391e37bc4e203dea23de7678ef5bedd7bf183b810c1f6c33d56eef0d269176f0161a8fa496445160f08906ff7ce2ef8c91bc8b24f97ceceae9761a90f154f869ae7f57092cbb47209e75dc175b0352fa8f4526a9d009a1baa99d89cd0afdea30d515ea5dec5c5436831dcea19c9036228bc7900f6f254646525a6c6cfcf9a0db0061906f0c29f93c59ccd03b21ee1b711a2f753b9fb2a15ed2a9d47c5032d9eedac4e427780ec8ffe586a34c15b4182aa726b2d7b9c8d9b2f4bbebe160e7ca72d3ea1ef7f231879f56af9934b8a31b7aeb0fbfb84f6ef2346b3fcc7e87eae5cfc01242def12532b2625b80322301ab79bc313b5434a8516b83c52f79945c57c522b5f05ec2b9e895dbe2c28fb12055aaf20f11484165401b823e9687da11a16ca5a6258a4866ea1c58416bd7ef107be2cca33b22b941d401d8d2a713530dc5c38df037cf3de150d858c590e8f46992204909cf9eec6dc15c42ea6ce2493eff6aa4d812505580bebf4427296fc7c38a7e1c27548f9ffa8b40816a2d4ade29adf066f41bcdd10afbd933983d7d468b44bc8e4aff1287e310a7f92ba4b0a632838ccad8eb412364b61d18aa0848403f7dc7a01033aa79a77334d0aff0301a76633c240985efd045845a904e76bbc717b50148488c3cdeb3b1842b08148f0eaab04e7146deef6afbc9d941ce0cba46b3027b707d8f88c9dc0b54b625416a665d5ee9900482514e98e87df9ff6813527924f39f5d759f2eb3970ad4659d75be788f89bc3a45fa3122debf800bb9f1868a06a26a75327a84359381f8eefd14e2aecec0a77fbd8f219159c24ff3e75bc87d3f232e8af6f4bb979b7044eba93a0dc869cb3e80c61dbe2a58e43bb8625b3d3615be82df591f70c1b3932d34354f013db3a098accbead3f05b7cc9886aa92dceb53fadf219144abef4e5504d282fd13ff5f23ce6532ccdce04ae1dd642ffb4f82c12d2f081bb4ac41f60bba17713452a6f53dd8b6d2007cdddf6529e508cc15098ee03b518f415178bd6b4fcbb73b567f2b662d8b79965d7ef0a50fc44367d291bcb7ee7817da10c5a9b83154a5ced20a1dc3f55a4079692dcf0db5a72561f7f87060f43dc3c19284add38e5e1c9fb1cebf8debd5468d0b553edba6d9a5518d9f37a997cf39469235749ff4d8a41dc6c5ac6b4ac53249fb7e8f6dc792120158d278bf1e2d4f13773fddc877f6c7cb71f4362d81ee9b9aea42d7752077b5a5b62735cda50c90783ff46da23d1403d6ddea3bb64a86aa2865ade0bd5990c245f7c207f44d4ce852ca8f2334e719cbdb6f392432fe4c156f69b964caae0351c99635f3efc0b8440998f2b469889b88b3eb363d1ebe441d73b08846388e4113fd7d0a88c7a311a0c1b920e5f617fe92eb66e41ffe31f83e9fe11f1be6ff27902fff924800062eb3e7c767fe935f5acea6801b6e6a36928a5e2582972468c5e8b9b6ae742ec73ff1eaf09c7ac9fcc8b8dcd83bbab0f9433ac819e82db2bafa1a8e0b11d33406bfa321b82397ef6cefca800c92765c1776b5d9032fd98180b07d0f4dfe8ca4443341d01aa0b9f1b1de4877d7477b88f7333228a20f1f7dcef92bff5dc13e2bf4ebd176c45ae01dcef7c39d3ebec30961f4afb2a61bfc7e5ddc3c7c873810d309722eed71adbd7fad2adeed32e3cc8ff0163f016856a412736cc643bf616c0ce26d87dee910bdb38531b43e5022e9ebfc229436af27366fffbe5f5c25471e6b14404b198ee9cb298bd34127d8a714039461ceefd760ed7e7cb2917fc6baeeef2fc34cda8", 0x1000, 0x2}], 0x40, &(0x7f0000001400)={[{@barrier='barrier'}, {@space_cache='space_cache'}, {@enospc_debug='enospc_debug'}, {@user_subvol_rm='user_subvol_rm_allowed'}, {@check_int='check_int'}, {@nossd_spread='nossd_spread'}], [{@uid_gt={'uid>'}}, {@dont_measure='dont_measure'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x34, 0x30, 0x38, 0x31, 0x38, 0x35, 0x33], 0x2d, [0x30, 0x61, 0x34, 0x34], 0x2d, [0x64, 0x30, 0x65, 0x39], 0x2d, [0x34, 0x62, 0x35, 0x64], 0x2d, [0x34, 0x36, 0x32, 0x35, 0x36, 0x34, 0x62, 0x30]}}}]}) preadv2(r0, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/193, 0xc1}, {&(0x7f00000015c0)=""/16, 0x10}], 0x2, 0x7, 0x3f, 0x4) r1 = syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x8, 0x3, &(0x7f0000001840)=[{&(0x7f00000016c0)="5e08ef88caad42b1cc9738403952d4650fd68e1be78a0c76fa714ba4e2948f9e09b51407cb4996f0aa5d488489e00a8eafddd2b3532a693f3fa02242b4baaea032e86dea93274739c7bd26780433134666ff6d18fc607bee", 0x58, 0x7d4}, {&(0x7f0000001740)="f7e766af99faec6199351e0fbb1f6655dee4118759b5cbe42951e8224f345267e2f63781d589f4c27f27246d7b8801370f75e8d765935d14", 0x38, 0x2c}, {&(0x7f0000001780)="1f06fad5778a3ab3841b4187c2b08a1a2f1832ebcdb028d97d66993ff914155d9a47d210063e28376c1f455e3a2b27fc18e744e61c19c4c91c40137f1bed7e7aefa1bd6cb15f2cd534a37037f3b34aa1def67eba550b3ee15452a8609861183c9cce4ccccf1ce54d60ed81629289f5283a84f40e0178b274fb0701c65673406db00abea4e74df444f892b5c2cb6609b777f8e2ce0031d19315e8c4", 0x9b, 0x2}], 0x810000, &(0x7f0000001880)={[{@shortname_lower='shortname=lower'}, {@utf8no='utf8=0'}, {@shortname_lower='shortname=lower'}, {@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}], [{@smackfsdef={'smackfsdef', 0x3d, '}\\\'{:[.'}}, {@appraise='appraise'}, {@uid_lt={'uid<'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user'}}]}) r2 = openat$mice(0xffffff9c, &(0x7f0000006180)='/dev/input/mice\x00', 0x281a01) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000061c0)={0xf1, 0x1, 0x10000, 0x7}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r3 = syz_open_dev$cec(&(0x7f0000006200)='/dev/cec#\x00', 0x1, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000006240)=')/{{/]\x00', &(0x7f0000006280)="57958d68debfed74372b0b481b8c180e4e5ff5c42ad1920b442ed9f82023abbf0e5b1645e4d0dbd25f10e088a9627a632af0ed52c98ae48dc8aad21635720a81e2de2c6ec08fc824424bddd68abf6c253d94e0ce85170f04e05965623422289d49e79c74c43ba04b2770f87cd9533b73ef144e6721d4c08f7e89a963a61b571180071c65e6df61dfe175d2b3a7f30364c69befd32accb1016fd347b8eff905a4474bca0330fe22", 0xa7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006340)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000063c0)={r4, r2, 0x0, 0x1, &(0x7f0000006380)='\x00'}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000006540)={'ip6tnl0\x00', &(0x7f00000064c0)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x90, 0x5, 0x94e986e1963b8bb6, @dev={0xfe, 0x80, [], 0x31}, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x3, 0x1, 0x7}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000006580)={@empty, 0x13, r5}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000006680)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006640)={&(0x7f0000006600)={0x40, 0x1, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5fa}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x20044001) splice(0xffffffffffffffff, &(0x7f00000066c0)=0x200000000000, r1, &(0x7f0000006700)=0x2, 0x7, 0x8) r6 = openat$null(0xffffff9c, &(0x7f0000006740)='/dev/null\x00', 0x143000, 0x0) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000006780)) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000006900)={&(0x7f00000067c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000068c0)={&(0x7f0000006800)={0x88, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5c}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0xd0}, 0x10040050) [ 461.091333][ T9539] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 461.182147][ T9539] usb 2-1: Using ep0 maxpacket: 8 00:12:06 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000001aaaaaaaaaaaa86dd60bf83de00103a00fe8000000000f50000000000000000aaff02000009000000000000000000000189320000000000008f00907804000000"], 0x0) [ 461.234712][ T9539] usb 2-1: too many configurations: 130, using maximum allowed: 8 [ 461.286853][ T9854] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 461.391605][ T9539] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 461.399431][ T9539] usb 2-1: can't read configurations, error -61 00:12:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0x50f, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x4, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="ee72ecc75791"}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) [ 461.594651][ T9539] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 461.701725][ T9539] usb 2-1: Using ep0 maxpacket: 8 00:12:06 executing program 2: r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) read$dsp(r0, &(0x7f0000000000)=""/138, 0x8a) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e186ff40fa0490246e1c000000010902120001000000000904"], 0x0) [ 461.742272][ T9539] usb 2-1: too many configurations: 130, using maximum allowed: 8 [ 461.873792][ T9539] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 461.881854][ T9539] usb 2-1: can't read configurations, error -61 [ 461.938823][ T9861] bridge_slave_1: FDB only supports static addresses [ 461.957057][ T9539] usb usb2-port1: unable to enumerate USB device 00:12:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) init_module(&(0x7f00000000c0)='E@-{\x90\\.*\\\x00', 0xa, &(0x7f00000002c0)=',^%\xea#&)@\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000020100"/20, @ANYRES32=r4, @ANYBLOB="08000200e0000002"], 0x20}}, 0x0) 00:12:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x17ef, 0x6085, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000400000068"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001200)={0x18, &(0x7f0000000100)={0x0, 0x1, 0xe5, {0xe5, 0x0, "fefc2bbd4e6108927534d68dd80a08fd860101544dca19f3cf2542b8d69900032993c003c78d081a8b387242a94cb5945b736f8469749367d372ab0f0e3d37bc1bfad06fc1f42cc6166f6ef3e3530b6521e5cdc57bb924fb67a8837890e0e7351f705d1ded7998623f51798333c9be55971aabaac64a39db424ad6bc0abda4c794b82ce8e786029da18c90911303d405684f5e71956ccc8f82b39a68e80e8c001249e9438e4e4ccfbcc5fde4321e122c710958c141283cd69bacc884f32f60d90ce089afb371ae3c51e60e54e0b1e7f380b9db6528635c47f424383c0384d30423c724"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 462.281940][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 462.462277][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 462.547517][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000005600), 0x0, &(0x7f0000005940)=ANY=[@ANYBLOB='uni_xlate=0,rodir,shortname=lower,utf8=1,shortname=winnt']) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @remote, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 462.643521][ T12] usb 3-1: New USB device found, idVendor=04fa, idProduct=2490, bcdDevice=1c.6e [ 462.653082][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.700598][ T12] usb 3-1: config 0 descriptor?? [ 462.822411][ T3226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 462.941363][ T9885] FAT-fs (loop1): bogus number of reserved sectors [ 462.948587][ T9885] FAT-fs (loop1): Can't find a valid FAT filesystem [ 462.961420][ T12] usb 3-1: Failed to reset configuration: err=-71. [ 462.968243][ T12] DS9490R: probe of 3-1:0.0 failed with error -71 [ 463.002803][ T12] usb 3-1: USB disconnect, device number 4 [ 463.164961][ T9885] FAT-fs (loop1): bogus number of reserved sectors [ 463.171793][ T9885] FAT-fs (loop1): Can't find a valid FAT filesystem [ 463.182248][ T3226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.193692][ T3226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.204044][ T3226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 463.217234][ T3226] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 463.226715][ T3226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.242658][ T3226] usb 1-1: config 0 descriptor?? 00:12:08 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x5) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x110000, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="181000000414040027bd7000fddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x240000c0) truncate(&(0x7f0000000280)='./file0\x00', 0x2d3c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000002c0)=0x40) pipe2$9p(&(0x7f0000000300), 0x4000) 00:12:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000006311180000000000950000000000000040fa21bcfa0137f365635fcca6dbbcb3f542b05363393e54be7d0e34f5c50e4fea0a78abe895a18d498fa62bf75df5fb1f483b765fdc7eb3404f04dbd0f942f3beecabad772da7caf40f8d70d04d7cca6c0d2f81673bc04607d0c3f0363ac815668514b99f728b0de171d3b7ac73bef9085cd768b1f3e3939b5690e4ece4e4cd18b39e1fce92730558794075170ee3d3b055e7df12741ed0d5d36183ff249e1720e54c74a2e5a87ad55a3f1511ef8bbcedb00c67f57320a8a1920fe49fcb3c8db361167cba29bde96f29add8b38300e0d83c029137759c61"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x40, 0x0, 0x1}}, 0x14) [ 463.706301][ T9879] udc-core: couldn't find an available UDC or it's busy [ 463.713587][ T9879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 463.825853][ T9870] IPVS: ftp: loaded support on port[0] = 21 [ 464.191919][ T3226] usbhid 1-1:0.0: can't add hid device: -71 [ 464.198421][ T3226] usbhid: probe of 1-1:0.0 failed with error -71 [ 464.243488][ T3226] usb 1-1: USB disconnect, device number 8 [ 464.282538][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 464.869391][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.876973][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.886812][ T9870] device bridge_slave_0 entered promiscuous mode [ 464.892195][ T3226] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 464.968940][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.977391][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.987315][ T9870] device bridge_slave_1 entered promiscuous mode 00:12:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfff, 0x4) ioctl$CHAR_RAW_PBSZGET(r1, 0x127b, &(0x7f0000000000)) read$snddsp(r0, &(0x7f0000000180)=""/146, 0xfffffe30) read$snddsp(0xffffffffffffffff, 0x0, 0x0) [ 465.169270][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.237096][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.282349][ T3226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.293777][ T3226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.304759][ T3226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 465.318172][ T3226] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 465.327533][ T3226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.377029][ T9870] team0: Port device team_slave_0 added [ 465.461344][ T9870] team0: Port device team_slave_1 added [ 465.504657][ T3226] usb 1-1: config 0 descriptor?? 00:12:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) sendfile(r5, r1, &(0x7f0000000240)=0x1, 0x0) io_submit(r4, 0x6aa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r3, &(0x7f0000000000), 0x1e}]) write$FUSE_WRITE(r3, 0x0, 0x0) write$P9_ROPEN(r3, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x1, 0x4}, 0x1ff}}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) finit_module(r2, &(0x7f0000000080)='macvlan\x00', 0x2) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="8056f500000010000040", @ANYRES32=r8, @ANYBLOB="0000000000000000540012800e0001006970366772657461700000004000028005000b000200000005000b000100000006000f003f0000000500160001000000040012000600180043000000050017000000000008000d00010400000a0005000400000000000000"], 0x80}}, 0x0) 00:12:10 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000001300)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000383c00fe800000000000000000000000000000ff0200000000000000000000000000010003000000000000c910fe800000000000000000000000000000070800000000000000000100000086009078000000000002000000000000"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x1}}], 0x20) [ 465.687704][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.695281][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.723176][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.832416][ T9039] Bluetooth: hci3: command 0x0409 tx timeout [ 465.852193][ T3226] usbhid 1-1:0.0: can't add hid device: -71 [ 465.858718][ T3226] usbhid: probe of 1-1:0.0 failed with error -71 [ 465.896624][ T3226] usb 1-1: USB disconnect, device number 9 [ 465.926712][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.934581][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.961178][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.436461][ T9870] device hsr_slave_0 entered promiscuous mode [ 466.503530][ T9870] device hsr_slave_1 entered promiscuous mode [ 466.566057][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.575176][ T9870] Cannot create hsr debugfs directory [ 467.638781][ T9870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.683978][ T9870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.728257][ T9870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.769872][ T9870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.910948][ T9039] Bluetooth: hci3: command 0x041b tx timeout [ 469.166135][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.242856][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.252236][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.283930][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.314472][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.325693][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.335294][ T3226] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.342979][ T3226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.365226][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.401218][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.416421][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.426284][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.433674][ T9041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.526985][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.537833][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.549258][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.560507][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.657360][ T9870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.668129][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.686373][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.697484][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.708549][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.720765][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.731391][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.742125][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.752250][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.904387][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.914828][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.922948][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.963435][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.993146][ T9039] Bluetooth: hci3: command 0x040f tx timeout [ 470.054240][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.064799][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.147649][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.159353][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.189276][ T9870] device veth0_vlan entered promiscuous mode [ 470.210720][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.220173][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.261501][ T9870] device veth1_vlan entered promiscuous mode [ 470.321366][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.332351][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.404331][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.415688][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.445302][ T9870] device veth0_macvtap entered promiscuous mode [ 470.473378][ T9870] device veth1_macvtap entered promiscuous mode [ 470.538647][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.550471][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.561335][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.572796][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.582952][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 470.594385][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.610105][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.624560][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.634388][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.644065][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.654759][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.694004][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.708214][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.719166][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.729812][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.739884][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 470.750637][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.766345][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.781232][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.791781][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.462048][T10173] FAT-fs (loop3): Unrecognized mount option "smackfsdef=}\'{:[." or missing value 00:12:16 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xbf, 0xcf, 0xc2, 0x8, 0x1b3d, 0x113, 0xd0f1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x1, [{{0x9, 0x4, 0xd3, 0x5, 0x0, 0xb4, 0x62, 0xf0}}]}}]}}, 0x0) 00:12:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0203000000000001000925bbdc32a97a80ce000000000002000000000000000000000f0000000002000100000000000000000b00000000030005000000000002000000ac1e00010000006647513221000000d785"], 0x58}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x120, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 00:12:16 executing program 1: getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x20) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x7}}, @TCA_NETEM_RATE64={0xc}]}}}]}, 0x6c}}, 0x0) 00:12:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000507000000b5e9b984dc31b956000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000080)=0x2200, 0x4) r4 = socket(0x100000000011, 0x6, 0x4) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in=@local}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe4) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000081) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x100, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x21, 0x0, r5, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRES64=r1, @ANYBLOB="f5d55d3dfaa7c0d57e36bc8913b41741311fdae74bb894c5f273a0487223d84c60fc28240fcf79c69817a64c557e22e6784f1e6ef540c7adff0ae82342df33573853de8137b6893ed29ed378c6ce06e5a803e43bdd6f20b75fb8be7f13106f99f2c759e3c7bfd8d19b5839e00fa0780482c5deed6db4516d8a9ae3f821a9d051555a3879781a885eb21601c4c1e4dea6852a3abec628083cf84d8605ffd34c643c5f402c71070b59df5e9135589061fbbd2ba28a101666d58449eb516b309fe21a2efb46b7af792b8021889a589f65da26b036cb8ba711edaaeff1699aa63f42209162c0a3a0362b2089"], 0x64}}, 0x4000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) [ 471.954734][T10188] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe000ffe0}, 0x10) [ 472.077326][ T9039] Bluetooth: hci3: command 0x0419 tx timeout 00:12:17 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioprio_set$pid(0x2, r3, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x800) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, &(0x7f0000000080)="6ad5eecfc29b3b09fc22167f0000007cd568b586f2964a52fe800000000000001d2e081bbaac6f21", 0x28, 0x0, &(0x7f00000001c0)={0x11, 0x0, r4}, 0x14) [ 472.454190][ T9539] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 472.701532][ T9539] usb 4-1: Using ep0 maxpacket: 8 00:12:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r3, 0xfffffffffffffffe, 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x9cd, 0x0, 0x7}, {0x10, 0x0, 0x10001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:12:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 472.832686][ T9539] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 472.841220][ T9539] usb 4-1: config 0 has no interface number 0 [ 472.847476][ T9539] usb 4-1: config 0 interface 211 has no altsetting 0 [ 472.854687][ T9539] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0113, bcdDevice=d0.f1 [ 472.863966][ T9539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:12:17 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0xff}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x16}, 0x3e}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x11, &(0x7f00000003c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r5, 0x9}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, 0x0, 0x4, {0x0, 0x1}, 0x1}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="e7e4000000006784603831c30e4965f6f7d2eca854a56b5fb02465e952a8325120c3a12c7c7c7ffe892ae971a50fd82fc3aa3d97517b206281bb144b8cb9e0549d9c0e81d6d480e81dd2eab428b1eadefcd61c5906435c8c3882f829e956e9736d1ce210c5ec6364ab8313f73f8770b903d38826b8055f755735538de8d7b524eb5ca50300000047a89f5b7dca00e7cc79b021375a", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x40040d0) [ 473.031827][ T9539] usb 4-1: config 0 descriptor?? [ 473.087324][ T9539] ftdi_sio 4-1:0.211: FTDI USB Serial Device converter detected [ 473.096983][ T9539] usb 4-1: Detected FT-X [ 473.276944][ T28] audit: type=1326 audit(1599437538.196:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10208 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc9549 code=0x0 [ 473.327049][ T9539] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 473.372723][ T9539] ftdi_sio ttyUSB0: Unable to write latency timer: -71 00:12:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000001800)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') recvmsg(r1, &(0x7f00000013c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/171, 0xab}, {&(0x7f0000001440)=""/88, 0x58}, {&(0x7f00000014c0)=""/225, 0xe1}, {&(0x7f00000015c0)=""/89, 0x59}], 0x6, &(0x7f0000001640)=""/156, 0x9c}, 0x40000000) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40086439, &(0x7f00000017c0)={0xa4d}) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000001700)={'filter\x00'}, &(0x7f0000001780)=0x50) [ 473.426127][ T9539] ftdi_sio 4-1:0.211: GPIO initialisation failed: -71 [ 473.526147][ T9539] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 473.627994][ T9539] usb 4-1: USB disconnect, device number 2 [ 473.738835][ T9539] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 473.750063][ T9539] ftdi_sio 4-1:0.211: device disconnected 00:12:18 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {r0, r1/1000+60000}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000080)={0xffffffffffffffff, 0x87b, 0xb2b, 0x6}) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) syz_usb_connect(0x0, 0x8a5, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0) [ 474.048866][ T28] audit: type=1326 audit(1599437538.966:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10208 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc9549 code=0x0 00:12:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007029d7404e080110bb530012000109028709dbb600001b09040000019142ff00090584", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x9a, 0x0) r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400040, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="d928bcda1a7f5bf7e70f265e02c56e2e7a66ae0def86481b1fe1406d1c454ba6b95e52e523057b6585e426ccf84f3b30e1eb67ab76b30e64520b0fd260d31137b63d99481172b08d6b4b474a") syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x0, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) [ 474.315485][ T9539] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 474.581547][ T9539] usb 4-1: Using ep0 maxpacket: 8 [ 474.705012][ T9539] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 474.714038][ T9539] usb 4-1: config 0 has no interface number 0 [ 474.720293][ T9539] usb 4-1: config 0 interface 211 has no altsetting 0 [ 474.727600][ T9539] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0113, bcdDevice=d0.f1 [ 474.736985][ T9539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.902009][ T9041] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 475.206427][ T9539] usb 4-1: config 0 descriptor?? 00:12:20 executing program 3: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfkDF\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x2) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="0200c8a5", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="040005000000000008000400000000002000000000000000"], 0x5c, 0x0) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[], 0x24, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0xa, 0x0, 0x0) socket(0x10, 0x803, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[], 0x1000001bd) [ 475.254458][T10171] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 475.286402][ T9539] usb 4-1: can't set config #0, error -71 [ 475.312102][ T9041] usb 3-1: config 0 has an invalid interface number: 126 but max is 1 [ 475.320710][ T9041] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 475.329563][ T9041] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 475.340120][ T9041] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 475.349205][ T9041] usb 3-1: config 0 has no interface number 0 [ 475.355727][ T9041] usb 3-1: config 0 interface 126 altsetting 9 has an invalid endpoint with address 0xA8, skipping [ 475.366685][ T9041] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 475.377889][ T9041] usb 3-1: config 0 interface 126 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 475.388908][ T9041] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 475.400497][ T9041] usb 3-1: config 0 interface 126 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 475.412858][ T9041] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 475.424105][ T9041] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 475.435316][ T9041] usb 3-1: config 0 interface 126 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 475.447127][ T9041] usb 3-1: config 0 interface 126 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 475.458089][ T9041] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 475.469575][ T9041] usb 3-1: config 0 interface 126 altsetting 9 has 12 endpoint descriptors, different from the interface descriptor's value: 15 [ 475.483013][ T9041] usb 3-1: config 0 interface 126 has no altsetting 0 [ 475.490002][ T9041] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=77.96 [ 475.500241][ T9041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.521411][ T9539] usb 4-1: USB disconnect, device number 3 [ 475.538850][ T9041] usb 3-1: config 0 descriptor?? [ 475.574230][T10248] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 475.603336][T10248] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 475.658608][T10248] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 475.874054][T10171] usb 2-1: config index 0 descriptor too short (expected 2439, got 27) [ 475.882674][T10171] usb 2-1: config 182 has too many interfaces: 219, using maximum allowed: 32 [ 475.892130][T10171] usb 2-1: config 182 has 1 interface, different from the descriptor's value: 219 [ 475.901629][T10171] usb 2-1: config 182 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 475.914701][T10171] usb 2-1: config 182 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 2047, setting to 1024 [ 475.953004][ T9041] usb 3-1: string descriptor 0 read error: -71 [ 475.965824][ T9041] i2c-tiny-usb 3-1:0.126: version 77.96 found at bus 003 address 005 [ 476.005239][ T9041] (null): failure setting delay to 10us [ 476.011406][ T9041] i2c-tiny-usb: probe of 3-1:0.126 failed with error -5 [ 476.073368][ T9041] usb 3-1: USB disconnect, device number 5 [ 476.134174][T10171] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=53.bb [ 476.146612][T10171] usb 2-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 476.155172][T10171] usb 2-1: Product: syz [ 476.214871][T10253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 476.260276][T10171] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:182.0/input/input5 [ 476.474153][T10253] udc-core: couldn't find an available UDC or it's busy [ 476.482100][T10253] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 476.523727][ T3226] usb 2-1: USB disconnect, device number 21 [ 476.720599][ T9539] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 477.091849][ T9539] usb 3-1: config 0 has an invalid interface number: 126 but max is 1 [ 477.100271][ T9539] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 477.109335][ T9539] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 477.120287][ T9539] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.129663][ T9539] usb 3-1: config 0 has no interface number 0 [ 477.136056][ T9539] usb 3-1: config 0 interface 126 altsetting 9 has an invalid endpoint with address 0xA8, skipping [ 477.148036][ T9539] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 477.159247][ T9539] usb 3-1: config 0 interface 126 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 477.170243][ T9539] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 477.181734][ T9539] usb 3-1: config 0 interface 126 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 477.193089][ T9539] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 477.204411][ T9539] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 477.216309][ T9539] usb 3-1: config 0 interface 126 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 477.227693][ T9539] usb 3-1: config 0 interface 126 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 477.239326][ T9539] usb 3-1: config 0 interface 126 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 477.250555][ T9539] usb 3-1: config 0 interface 126 altsetting 9 has 12 endpoint descriptors, different from the interface descriptor's value: 15 [ 477.264003][ T9539] usb 3-1: config 0 interface 126 has no altsetting 0 [ 477.271047][ T9539] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=77.96 [ 477.280256][ T9539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.310878][ T3226] usb 2-1: new high-speed USB device number 22 using dummy_hcd 00:12:22 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x7, 0x1000) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5, 0x8e40) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) openat$mice(0xffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x8001) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="17fe2ef6f0ee1d8809f3d0ddd42acee2e7553f9bc763f9a2f482bb0d7da65517edf31430d8d0fe2246702a24ff071486101a851a1d384e02035fef6b4dad68dbdbef3a3c33efdddcfcd8fa5ce57acf96e16c3b399369da40685e7029b028c7409d0f5904fb7da94562b1094eb7c4013f0ed15a2843895cadb8956d6caae38167f9cb7b452ce2f9cf48553ee4fc8d26891000dafc2c8838d08e3466707c333d01ea550385dbe223f849268099aedeef5910513a79f7927cc2c26f00006700482c4543bf28be53810e3aff2ab7f5cb7fe628a3922b918cdf3a37919b41624cfeb0b14500") [ 477.678406][ T3226] usb 2-1: config index 0 descriptor too short (expected 2439, got 27) [ 477.688067][ T3226] usb 2-1: config 182 has too many interfaces: 219, using maximum allowed: 32 [ 477.697359][ T3226] usb 2-1: config 182 has 1 interface, different from the descriptor's value: 219 [ 477.707141][ T3226] usb 2-1: config 182 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 477.718939][ T3226] usb 2-1: config 182 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 2047, setting to 1024 00:12:22 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007029d7404e080110bb530012000109028709dbb600001b09040000019142ff00090584", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x9a, 0x0) r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400040, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="d928bcda1a7f5bf7e70f265e02c56e2e7a66ae0def86481b1fe1406d1c454ba6b95e52e523057b6585e426ccf84f3b30e1eb67ab76b30e64520b0fd260d31137b63d99481172b08d6b4b474a") syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x0, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) [ 478.050843][ T3226] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=53.bb [ 478.060193][ T3226] usb 2-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 478.161750][ T3226] usb 2-1: can't set config #182, error -71 [ 478.222583][ T3226] usb 2-1: USB disconnect, device number 22 00:12:23 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000071c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000066a000/0x2000)=nil) pkey_mprotect(&(0x7f0000665000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x60000, 0x0) ioctl$CHAR_RAW_ZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x9, 0xf9e}) mremap(&(0x7f0000eb0000/0x2000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00006b2000/0x2000)=nil) [ 478.352884][ T9539] usb 3-1: config 0 descriptor?? [ 478.371938][ T9539] usb 3-1: can't set config #0, error -71 [ 478.427383][ T9539] usb 3-1: USB disconnect, device number 6 00:12:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x1, 0x0) read$snddsp(r3, &(0x7f00000007c0)=""/4096, 0x1000) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x7, 0xffffffff80000000}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000008680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r4}, 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x1f, 0x81, 0x4, 0xfffd, 0x4, 0x0, 0x7f}}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000280100002800c000180080001000b000000"], 0x28}}, 0x0) [ 478.823113][ T3226] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 479.193803][ T3226] usb 2-1: config index 0 descriptor too short (expected 2439, got 27) [ 479.202482][ T3226] usb 2-1: config 182 has too many interfaces: 219, using maximum allowed: 32 [ 479.212726][ T3226] usb 2-1: config 182 has 1 interface, different from the descriptor's value: 219 [ 479.222348][ T3226] usb 2-1: config 182 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 479.236061][ T3226] usb 2-1: config 182 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 2047, setting to 1024 00:12:24 executing program 2: r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe5Kh\xcav\xc9\xbb7\xf4JM\x95\xe0\xe5\xd7\x1dQ\xed\xd0\xa7)\xb2\xedA\xc9\xb1\xf7\xf28\x15\xd4)\xc5\x16\xe9t~\xe8oQ\xf3\x88\x06\xbf\xc5\xe4\xf99\x97$\xf9\xee\x01\x00a\xc7U\x1aW\xb5\xfbB\xb1\xef\xe8\x8c\x1c-\x04j\x8f1\xef\\1\xb6\x81\x06\xc5\xb2\x891w\x19\x89\xb3\xed\xee\rl\x9b~j\xa9\x80\\B*\xb7\xafoL\x95\xa8\x8e\x87\x12s\xfb\xe6b\xe0\x18\xf6\xf5S2\xfd$\x1f\x95\xcd\x01\x1a\xc9h\n\xfa\xaff}\nm\xc6\xa6\x83C\xd1k\xd4\x1cQb\x85o\xad`\x01L;\xb8@\x9d\xa6J\x13\f\t\xe5\xf7XU\xfej\x8f)}\xb1\x80=>\xeb~\x890\x93\x9eS\xc7\x84\x12@_N\x96\'\x04\x92I\x1c\x1b@h\xa0\xf2\xd7K\xa5\xad\xf4\xd2\xf4\xcb\xf3\x115h\xa8\xd9\xcfb#\xdf\xf8\xb9\x99y\vD%\xeb\xa4\x9di\xd9)\xf9[\xd1V\xaf!.Z\x9f_\xbf\x99\xf6\xa7\x16\xdf \xc9\xe6s\xbf\xaa\x97\xdb7\xdd\v\xad\xf3}K\n\x19C\x92\x19K4{\x9e\xee', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x6, &(0x7f00000000c0), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'veth0_vlan\x00', {0x800}, 0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000080)={0xc, 0x0, 0x4, {0xfff, 0xc53, 0x9, 0xa236}}) [ 479.501509][ T3226] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=53.bb [ 479.511300][ T3226] usb 2-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 479.519572][ T3226] usb 2-1: Product: syz [ 479.622563][T10312] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 479.655719][ T3226] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:182.0/input/input6 00:12:24 executing program 2: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x8002, &(0x7f0000000040)=ANY=[@ANYBLOB="7362736563746f723dff01666666666666666666666666666665312c00"]) [ 479.956019][T10312] udc-core: couldn't find an available UDC or it's busy [ 479.963666][T10312] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 480.054838][ T3226] usb 2-1: USB disconnect, device number 23 [ 480.061109][ C0] kbtab 2-1:182.0: kbtab_irq - usb_submit_urb failed with result -19 00:12:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e48000038000505d25a80648c2a940d0224fc6010020a400a000e00053582c137153e370800018000f01700d1bd", 0x34034}], 0x1}, 0x0) 00:12:25 executing program 2: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5840200}, 0xc, &(0x7f00000000c0)={&(0x7f0000001340)={0x1090, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdc9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x21}]}, @TIPC_NLA_NODE={0x1030, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xf, 0x3, "c19b8043e93b54543f6485"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc818}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1090}, 0x1, 0x0, 0x0, 0x4000}, 0x20040031) syz_usb_connect(0x0, 0x52, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x2040, 0x0, 0x0) getrandom(&(0x7f0000001100)=""/240, 0xf0, 0x1) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @default]}, 0x48) [ 481.480337][ T3226] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 481.841038][ T3226] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 481.849243][ T3226] usb 3-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 481.860763][ T3226] usb 3-1: config 0 has no interface number 0 [ 481.867132][ T3226] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.02 [ 481.880519][ T3226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.954846][ T3226] usb 3-1: config 0 descriptor?? [ 482.213298][T10171] usb 3-1: USB disconnect, device number 7 00:12:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x406, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "957096", 0x3d0, 0x6c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, {[@dstopts={0x84, 0x16, [], [@hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x7f, [0x9]}}, @generic={0x9, 0x6c, "8a6b6998956efea1b7afaf0e842a592b3eebeb78eb978ed8237adc8dd7d08287d3447860937ff2660b62255837b2fd7f6d5125ca18404eb3f337543bc025540ec89dc52ff14b74881981f2eff19bfca850362b18a95df0ee4bb6155f12c2c92b2015c85e3cec1761e805f1a5"}, @enc_lim={0x4, 0x1, 0x79}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @srh={0x3b, 0x10, 0x4, 0x8, 0x14, 0x20, 0xff, [@private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @rand_addr=0x64010100}, @local, @mcast1, @mcast2, @local, @mcast1, @private1]}, @hopopts={0x33, 0x1d, [], [@enc_lim={0x4, 0x1, 0x80}, @generic={0x4, 0xe7, "93db5cb4aff228d5ec05094aa8c4fabff6d1977eb0d34f1ebfcb509d93d7671d823686fe643435b2c81387a25d0d3b8cccab130998ecddf4a588ac25e546dab5faaf384f1a0b9de6cedd532a4d56e48a29e5966d20f716fef3d8713f95a2a2a5893384847c3b05a81e74677253b8b442e89afa4a233c9258f89e934d945b4535e343f76c2408e80797b2f043c8cba6da46d753bc8bd45899ffcfde630e607b07ea22184f338f25f5b4bf5d03e0538aa23adc5b519dc1d666a9dbaf289da934cdf4f669174d0e1f88c2bbe2bb45adb1fc926158b948c6df09acee40e983ed7ebf430b16880d408d"}]}, @srh={0x2e, 0x10, 0x4, 0x8, 0x5, 0x0, 0x0, [@private0, @mcast1, @remote, @dev={0xfe, 0x80, [], 0x23}, @empty, @private1, @mcast1, @local]}, @hopopts={0x33, 0xc, [], [@generic={0x5, 0x5c, "802b906c8274ba589625182ab61d854d99bf56d50a3fba79943c683c536a0767ea33c2c9a8a792c7940aa3989e86bf3cc05a7098a1af7f064618839b641f6e38c62bb538f9c8cd35510de6d9391e5d572e84676cbd8af00dfc312017"}, @pad1, @ra]}, @fragment={0x21, 0x0, 0x0, 0x1, 0x0, 0x9, 0x65}], "e84e4c6283acce26f53057da1794b6ded3f8f35fa67492eb74ca9dfe176f4df1b8fd6bb9265b63c1973909b5aad45742560233bd79021738b52bc0c24d52ac4c189fd50c6a537424a275738613847776d11d0b2a49c9effaf95b6c4300e4969753abc15faf7bfcba695e8ecb97e377e96032f2e21f2e0e8036b92e93e1e77c88a180ccff091dfd3efdf0a3be4b3357db"}}}}}, 0x0) 00:12:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x74}}, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 00:12:30 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f0000000040)) 00:12:31 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000076d74d089c0e0000967c0000000109021b000100000002090400000195ce7f040905850b0800000000"], 0x0) syz_usb_connect(0x2, 0x202, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x67, 0x15, 0x6c, 0x20, 0x54c, 0x2e1, 0x73f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f0, 0x1, 0x1f, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0xc1, 0x80, 0x8, 0xe7, 0x6c, 0x86, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x9}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x3f, 0x4f}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x6, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x1, 0x2, 0x7f}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x2, 0x7, "29e6f393"}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x3, 0x20}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "d4f6988035dc"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x9, 0x2, 0x5}, [@acm={0x4}, @obex={0x5, 0x24, 0x15, 0x1f}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x63, 0x40, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x5}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x9c, 0x70, 0x40, [@generic={0xd, 0x1, "0e0f2e394e06380dcdae08"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x3e, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x50, 0xd8e6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x1f, 0x7, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x1, 0x4, 0x20}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x1, 0x6, 0x81, [@generic={0xb, 0xe, "28afe1adda652359ce"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x4b, 0x3, 0x81, [@generic={0x24, 0x37, "d5fbc75559ece1cbaf4fd1a549ed83a25587fd783c7cbefd6d317cc3cd1066467eae"}, @generic={0x2c, 0x1, "f4be7ae501e7eeafd90cf4812296dc328aa7663d9056e4a18412867a7687698ce8bb39b941b7ab407099"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3bf, 0x81, 0x1f, 0x40, [@generic={0xc1, 0x38, "da36e5db3d8404a12b122524725f13e8ca50745105ef5a0d4d951795565636f1a266b46a63d5aff3db0b2843960ba09404d249a4a6b69dd66aa2b4ba1083e86370bba9ca87d5e4744b49a3c9ef05003d93c5ab7e41ba3b9dac15688c6177d07f5840cc0098c83d531c6d4c61932f89d0d19d414c1413fd2a5712e46e9f8a63002625fed4fdab9953c6ac42f88c634b9e5640da77dba89843897460be00691e1042b9f06dab32f3a8875ed7f37143480cd84e3834241d5ac0f901d256989dc7"}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x3, 0xf6, 0x6, 0x40, 0x1}, 0x36, &(0x7f0000000300)={0x5, 0xf, 0x36, 0x5, [@ptm_cap={0xfffffcee}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8f, 0x5, 0x8, 0x150, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x67, "a4549fa8775af05fc7878355e2395e65"}, @ptm_cap, @ptm_cap={0x3}]}, 0x2, [{0x2c, &(0x7f0000000480)=@string={0x2c, 0x3, "5fab60c5c7663269cf50c59db18f435cc08b95b6242762f199a3b5ca0cc7bd8baadeaf47bf06a354f5df3b3d9174"}}, {0x4, &(0x7f0000000380)=@string={0x0, 0x3, "3a6d574c1d08a718fa16856cdfd4e0b6ace663c5f89fcb02c10046c7e6441ecc4766142fc0deaa4d7081841ee83f8af34cade1b63e"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000000b80)='/dev/input/event#\x00', 0x608, 0x0) r1 = dup2(r0, r0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000bc0)={0x1, 0x0, 0xc7c, 0x0, "bb79fc980d9644734c96815f4ca5229de6c9e10d777cecf003df02592e99ce7d"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) [ 486.660885][ T8713] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 486.900899][ T8713] usb 1-1: Using ep0 maxpacket: 8 [ 487.022721][ T8713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 487.033954][ T8713] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=7c.96 [ 487.043400][ T8713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.161950][ T8713] usb 1-1: config 0 descriptor?? [ 487.406097][T10385] udc-core: couldn't find an available UDC or it's busy [ 487.413500][T10385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 487.520314][ T8713] usb 1-1: string descriptor 0 read error: -71 [ 487.533660][ T8713] Registered IR keymap rc-streamzap [ 487.540444][ T8713] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 487.555269][ T8713] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 487.740026][ T8713] streamzap 1-1:0.0: Registered on usb1:10 [ 487.781840][ T8713] usb 1-1: USB disconnect, device number 10 00:12:33 executing program 4: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/29}, 0x21, 0x2, 0x1800) prctl$PR_SET_ENDIAN(0x14, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe4) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xffffffffffffffff, r0, r1, r2, 0x50, 0x2}, 0x0, 0x0, 0x1, 0xfff, 0xffff, 0x8, 0xffff, 0x6, 0xc8, 0x1, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x4, 0xff, 0x3, 0x2}, &(0x7f0000000380)=0x14) r4 = open_tree(r3, &(0x7f00000003c0)='./file0\x00', 0x9001) write$P9_RMKNOD(r4, &(0x7f0000000400)={0x14, 0x13, 0x2, {0x2, 0x4, 0x2}}, 0x14) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000440)) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003, 0x2010, r3, 0x1000) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000480)=0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x140d, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x840) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000005c0)={0x3, 'wg2\x00', {0x1}, 0x1}) r6 = fsmount(r4, 0x1, 0xc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000600)={0x3a, 0x2, [], [@hao={0xc9, 0x10, @remote}]}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e20, 0x43, @remote, 0x1ff}, {0xa, 0x4e24, 0xebff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d76}, 0x7, [0x7, 0x8000, 0x9, 0xa0000000, 0x9, 0x80000000, 0x5, 0xb83f]}, 0x5c) [ 488.380118][ T8713] usb 1-1: new high-speed USB device number 11 using dummy_hcd 00:12:33 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r3, 0xfffffffffffffffe, 0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x6000, 0xf000, 0xf, 0xff, 0x0, 0xe7, 0x7, 0xc9, 0xfa, 0x4, 0x0, 0x1}, {0x2000, 0x5000, 0xe, 0x40, 0x7, 0x0, 0x1, 0xff, 0x3f, 0x1, 0xc2, 0x1}, {0x0, 0x4, 0xe963a91555ac0c35, 0x5, 0x20, 0xef, 0x40, 0x6, 0x40, 0x5, 0x1, 0x7}, {0x100000, 0x0, 0xa, 0xff, 0x7, 0xff, 0x0, 0x81, 0x0, 0x34, 0x1, 0x7}, {0x10000, 0x2, 0x1, 0x6, 0xf1, 0x0, 0x7, 0xa0, 0x3f, 0x3f, 0x4, 0x7}, {0xf000, 0xd000, 0xf, 0x5, 0x8, 0x7, 0x2, 0x81, 0x1, 0x4, 0x1, 0x6}, {0x4, 0xd000, 0xe, 0x9, 0x6, 0x9, 0xf5, 0x6, 0x5, 0xa3, 0x1, 0x5}, {0x3000, 0x5000, 0x4, 0x7, 0xfe, 0x0, 0x1c, 0x0, 0x0, 0xff, 0x20, 0x38}, {0x100000, 0x6}, {0x3000, 0x8001}, 0x20, 0x0, 0x1, 0x2010, 0xd, 0x2800, 0x5000, [0x7fff, 0x3ff, 0x9, 0xac5]}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRESDEC=r5, @ANYBLOB="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"], 0x8d0}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:12:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000000c0)={0x0, 0x1, 0x0, [0x1, 0x7, 0x106, 0x2, 0x3ff], [0xd938, 0xdf, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0x7, 0x0, 0x7, 0x4, 0x7, 0x2e5f, 0x5, 0x5, 0x7, 0xffffffffffff8001, 0x1, 0x1, 0x70, 0x9, 0x55f, 0x2, 0x7fffffff, 0x83f8, 0x80000000, 0x4de8, 0x4, 0xf7, 0x3, 0x2, 0x9, 0x40, 0xff, 0x6, 0x3, 0x3995, 0x3, 0x10000, 0x0, 0x2, 0xfffffffffffffffb, 0x5, 0x4, 0x6, 0x4, 0x7ff, 0x8000, 0x2, 0x0, 0x9, 0x1, 0x16a0, 0x20, 0x0, 0xee, 0x6f28, 0x7, 0x6, 0x1000, 0x8, 0x5, 0xd2b2, 0xc712, 0xc00000000000, 0xd8e, 0x353, 0x6, 0x8, 0x2, 0x9, 0x40, 0x2, 0x328a8251, 0x7, 0x1ff, 0x3f, 0x79d, 0x7, 0xf4, 0x2, 0x20, 0xac, 0x1000, 0x5, 0x1c2, 0xfff, 0xffffffffffffff6b, 0x281c, 0xb869, 0x7fff, 0x9, 0x100000000, 0x0, 0x7, 0x100000000, 0x3, 0x0, 0x2, 0x0, 0x8, 0x8000, 0x1, 0x5, 0x9, 0x1f, 0x10000000, 0x3, 0x6, 0x376, 0x7, 0x8, 0x9, 0x4, 0x6, 0x8, 0x3178, 0xf1aa, 0x6b, 0x802, 0xffffffff, 0x2]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={r1, "2d2a019ca83c4ec74d20fd28c3034cf1"}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x30, 0x4) r3 = semget(0x0, 0x1, 0x8) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000040)=""/119) [ 488.620006][ T8713] usb 1-1: Using ep0 maxpacket: 8 [ 488.740968][ T8713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 488.752224][ T8713] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=7c.96 [ 488.761565][ T8713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.815958][T10414] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2600e7f8, &(0x7f0000e68000)={0x2, 0x4e24, @remote}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 488.950215][ T8713] usb 1-1: config 0 descriptor?? 00:12:34 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 489.194727][T10385] udc-core: couldn't find an available UDC or it's busy [ 489.202041][T10385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 489.250721][ T8713] usb 1-1: string descriptor 0 read error: -71 [ 489.263068][ T8713] Registered IR keymap rc-streamzap [ 489.269643][ T8713] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 489.284891][ T8713] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 00:12:34 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4e727335fda9102b2c00a63ee38e2a1815fb436d1add39c16aa0cb90b204e7245badf5217546730e", @ANYRES32]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 00:12:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="0000520000000b00042b20da3408536f3137e51f5b2aae210600000050b085d8b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x7ff, 0x0, 0x9, 0x6, 0x2}, 0xc) r1 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400e42, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) [ 489.582792][ T8713] streamzap 1-1:0.0: Registered on usb1:11 [ 489.623381][ T8713] usb 1-1: USB disconnect, device number 11 [ 489.640048][ C0] streamzap 1-1:0.0: urb terminated, status: -108 [ 489.740512][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.863959][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.967655][T10451] tmpfs: Unknown parameter 'Nrs5ý©+' [ 490.014372][T10451] tmpfs: Unknown parameter 'Nrs5ý©+' 00:12:35 executing program 2: syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x40, &(0x7f0000000180), 0x0, &(0x7f0000001500)={[{@grpjquota='grpjquota', 0x3d}]}) r0 = semget(0x0, 0x2, 0x405) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000000)=""/13) openat$fuse(0xffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 00:12:35 executing program 0: r0 = socket(0x1e, 0xa, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@none, 0x80000001, 0x2, 0x3f, 0x3, 0x1, "cd38ca2a6e9b65dcc8d764c15afff1dbf8589548348e942c58d7d9c4982795e450b03da0f9cc9ed449d4bc281db5664afef56987a49fdab56115543e6368f403c7a8317a85f13ed727bad014f723266d56018c62044a6a2e15072369cbce659e9cba5c031de91f711eb652f02c17a79ab162078b25347a228afd3f3dfee46d10"}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0xbf, 0x1a, 0x10, 0x644, 0x800f, 0xeee8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x39, 0xe2}}]}}]}}, 0x0) [ 490.319961][ T9041] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 490.460939][T10457] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 490.560098][ T9041] usb 2-1: Using ep0 maxpacket: 8 [ 490.616301][T10457] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 490.693467][ T9041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.705647][ T9041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.715802][ T9041] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.729171][ T9041] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 490.738571][ T9041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:12:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000010000307ebffd40606c6000040440000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f5319f68d2b13651a643ba1d864dc423db53c56eb2b04361972eba624cd488693441e33eb8392d76d9b57a78d0d77e9080000000000000064516012857d445602af835297c84c211911e5fadece87db5a8894f36a19f7ba231dacc61ef4b8524330461a0db46abb795fdcd89a50852f130a289058c679d9b7b4a8d431960180e4c751345f328c02a8ba6c2a"], 0x200}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r3 = socket(0x1e, 0x4, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000070601030000000000000000020000090800064004e40000080006400000000509edf599e73516c50800020073797a3000000000"], 0x38}}, 0x8000) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xb3, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="b399692dbaf87d96f8a6f4d0c803", 0xe, 0x0, 0x0, 0x0) r4 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r4, 0x3, 0x13, &(0x7f0000000080)=""/11) r5 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x3d, &(0x7f0000000000), 0x20a154cc) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000520020152dbd7000ffdbdf250208000600080000000000000000"], 0x24}}, 0x1) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0xb4, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x15}, 0x20}, @in6={0xa, 0x4e22, 0xfff, @remote, 0x7f}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000480)=0xc) [ 490.909993][T10171] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 490.939589][ T9041] usb 2-1: config 0 descriptor?? 00:12:35 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(r1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca249435, &(0x7f00000000c0)={0x2, 0x7, @start={0x0, 0x1, "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", "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"}, [0x4, 0x5a0, 0x81, 0x60b1, 0x71, 0x7ff, 0x53, 0x10000, 0x7, 0x4, 0xbc, 0x40, 0x9, 0x0, 0x7a, 0x100, 0x80000001, 0xfffffffffffffffe, 0x100, 0xffff, 0x100000001, 0x8000, 0x20, 0x3, 0x9246, 0x3ff, 0x401, 0x708399c4, 0xac3, 0x401, 0x4, 0x8, 0xfffffffffffffff8, 0xc7f, 0x6, 0x6, 0x7, 0x1f, 0x8, 0x4d, 0x3, 0x100000001, 0x1bebca2d, 0x7, 0x8, 0x1, 0x3, 0x7ff, 0x8, 0x40, 0x1ff, 0xb54, 0x2, 0x7, 0x3, 0x6, 0x3, 0x0, 0x3ff, 0x2, 0x9, 0x2, 0x1, 0x14]}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60814}, 0xc, &(0x7f0000001300)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2b, 0xa, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x8080) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000b00)={0x0, 0x0, 0x100, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000f00)={0x920fbb8d009494ce, 0x6, {0x7f, @struct={0x4, 0x7fffffff}, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc, 0x963, 0x58, @struct={0x95a, 0x8}, 0x1, 0xdde7, [0x3, 0x1, 0x3, 0x6, 0x8001, 0xf734]}, {0x6, @usage=0x4, r3, 0x5, 0x1, 0x9, 0x0, 0xfff, 0x0, @struct={0x94d, 0x7fffffff}, 0x7ff, 0x6, [0x6, 0x5, 0x4, 0x8, 0x7ff, 0xfffffffffffffffe]}, {0x400, @usage=0x18, r4, 0x5, 0x80, 0x2, 0x0, 0x20, 0x3, @struct={0x40, 0x8}, 0x0, 0x101, [0x3, 0x7, 0xea63, 0xffffffffffffffe0, 0xbf6, 0x9]}, {0x7, 0x7, 0x1}}) connect$inet6(0xffffffffffffffff, &(0x7f0000001380)={0xa, 0x4e21, 0x1, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005200), 0x0, 0x10042044) setfsgid(0x0) [ 491.300859][T10171] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=ee.e8 [ 491.311638][T10171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.351837][T10171] usb 1-1: config 0 descriptor?? [ 491.424682][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x5 [ 491.433360][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 [ 491.441339][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x5 [ 491.449216][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 [ 491.457108][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 [ 491.465005][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 [ 491.468454][T10455] IPVS: ftp: loaded support on port[0] = 21 [ 491.473017][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 [ 491.473233][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 [ 491.495475][ T9041] smartjoyplus 0003:0925:8866.0001: unknown main item tag 0x0 00:12:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r3, r4/1000+10000}, {0x0, 0x2710}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 491.593943][T10171] usb 1-1: USB disconnect, device number 12 [ 491.640956][T10487] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.651988][T10487] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.003080][ T9041] smartjoyplus 0003:0925:8866.0001: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 492.017968][ T9041] smartjoyplus 0003:0925:8866.0001: no output reports found [ 492.288341][T10487] team0: Port device veth5 added [ 492.352769][ T9041] usb 2-1: USB disconnect, device number 24 [ 492.458269][T10489] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.468264][T10489] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.498555][T10489] team0: Port device veth7 added [ 492.711050][T10171] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 492.900777][ T9041] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 493.110228][T10171] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=ee.e8 [ 493.119410][T10171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.140539][ T9041] usb 2-1: Using ep0 maxpacket: 8 [ 493.235350][T10171] usb 1-1: config 0 descriptor?? [ 493.259887][T10455] chnl_net:caif_netlink_parms(): no params data found [ 493.275595][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 493.371378][ T9041] usb 2-1: device descriptor read/all, error -71 [ 493.490628][ T9039] usb 1-1: USB disconnect, device number 13 [ 493.707590][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.714999][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.726298][T10455] device bridge_slave_0 entered promiscuous mode [ 493.794474][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.802054][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.812084][T10455] device bridge_slave_1 entered promiscuous mode [ 493.970554][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.010136][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.117452][T10455] team0: Port device team_slave_0 added [ 494.158481][T10455] team0: Port device team_slave_1 added [ 494.265059][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.272447][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.301359][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.326937][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.338008][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.364292][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.509194][T10455] device hsr_slave_0 entered promiscuous mode [ 494.525017][T10455] device hsr_slave_1 entered promiscuous mode [ 494.537346][T10455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.545508][T10455] Cannot create hsr debugfs directory [ 494.988989][T10455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 495.056525][T10455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.164709][T10455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.264468][T10455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.350193][ T9041] Bluetooth: hci4: command 0x041b tx timeout [ 496.492320][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.641093][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.651458][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.679310][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.705945][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.716404][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.726978][T10171] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.734291][T10171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.797547][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.807266][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.817520][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.827414][T10171] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.834795][T10171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.843941][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.855573][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.965026][T10455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.976065][T10455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.001247][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.012320][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.023020][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.034801][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.045255][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.055282][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.066501][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.077228][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.114987][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.125851][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.183624][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.191546][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.246261][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.430220][T10171] Bluetooth: hci4: command 0x040f tx timeout [ 497.501805][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.514339][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.608343][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.618778][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.655957][T10455] device veth0_vlan entered promiscuous mode [ 497.665151][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.675824][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.743903][T10455] device veth1_vlan entered promiscuous mode [ 497.865809][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.876864][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.909171][T10455] device veth0_macvtap entered promiscuous mode [ 497.944964][T10455] device veth1_macvtap entered promiscuous mode [ 498.012239][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.024983][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.035531][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.046286][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.056964][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.067704][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.077816][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 498.088916][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.104342][T10455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.116947][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.127042][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.136686][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.146884][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.180118][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.192434][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.203318][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.213937][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.224381][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.235266][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.245356][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 498.256352][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.270902][T10455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.281237][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.291560][T10171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:12:43 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d041fc74000010203010902240001010000000904000001030103f4601011bf88968e10a339b866b3eabb00092100000001220000090581030000000000"], 0x0) 00:12:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) openat(r1, &(0x7f0000000000)='./file0\x00', 0x602040, 0x186) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2716, 0x0, &(0x7f00000000c0)) 00:12:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) timerfd_create(0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc6}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffeffffffffe, 0x1}, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf25040000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020074756e6c3000000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030000000000080003000100000008000300030000001400020076657468305f766c616e00000000000014000200626f6e643000000000000000000000007c0001800800030001000000140002006261746164765f736c6176655f310000080003000200000008000300020000001400020065727370616e30000000000000000000140002007663616e3000000000000000000000000800030002000000140002006772653000000000000000000000000008000300020000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000300000000000800030002000000140002006272696467655f736c6176655f3000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="38000180080003000300000014000200000000000000000000000000000000000800030003000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="18000180140002006d616373656330000000000000000000"], 0x208}}, 0x4000000) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) 00:12:43 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x40080, 0x0) fstat(r4, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001400)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a00010000000000000000008241f2b8530b4fbf1d18b9a31ca559425665eeb5ebe396f06b8ce01a09db89df84f741fa0399493890e2fe9da73887613ce7d9128c0e71658d3e3966ca0fb8c442a4ffb009120eddccaefdf8accbc7cbd6896f8af5a7ce6a4409626a88f7d99d9d55cb36180bb000849d462f3a8168cc1b6a0a97a9895b4e1338c898f57b57bb128994ef75a5418770993d465c33361f27adef079c16cc08c9af5328ebf7b682cb0e4d04d901ba9f97eba3aaaa1d237a11009e1452c972541ba8585b0ccd109126ab91cf0fbb121cf96f3de7146c72d0863b041c10"], 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0010000020000000140012800b00e5ff66626e657665cae4040002800a002b4d00020000000000003dd47f4a4f7fef45ae0a16ac243b0c0ac87dbd3602a193f011c835014a6ccdbda8d658c7a5771d9c090188da6087732e028dce59681ac874c465d83773f64e33c0096bd60a76f1d606a816bb3e36599a4d00bcf5ef4c556b230ae493711a04"], 0x40}}, 0x0) getsockopt$llc_int(r6, 0x10c, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5], 0x30) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000400)=""/4096, &(0x7f0000000040)=0x1000) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 00:12:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x0, 0xe, [], [@jumbo={0xc2, 0x4, 0xffffffe1}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @generic={0x5, 0x5c, "7faf0ae7396a29abac369135b49e5f5f9b8482d621db11147022da9d6f4546c814e36e905eacb6e8ee4a43b0cd6e59c089f363bafc1e49f4b7a7dec04d23d39d34d85289f03cfc5da7adf24d39164996cae9b970d915940621fd1ea3"}, @jumbo={0xc2, 0x4, 0x3380c31b}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x80) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"], 0x18) [ 499.326666][T10793] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 499.511888][ T9041] Bluetooth: hci4: command 0x0419 tx timeout 00:12:44 executing program 0: syz_mount_image$nfs4(&(0x7f0000001a00)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x1ff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="2312cffb1c5ea2d2ee383576be19ee638a51232134528714dc9139ebb093099c59212fa39a04e871dc2f", 0x2a, 0x6}, {&(0x7f00000000c0)="5f7087d3767d98b33fc9e3f1c9d61d041917e904000000b1a8cf726952476af1116ffddc8ebb8080f4254655adabdb1acf92d95dfaa151ba8cce76adefc2fd869de94d79bc3e4f9930f012de9f61857a3b114af3e49e97367cf43fe610b86c664a82d0a2103385c80571430c3cd97e90074436940dd52fa7fec23c25900412f362b72b", 0x83, 0x9}], 0x200000, &(0x7f0000000000)='netdevsim0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = socket(0x10, 0x803, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) connect$pptp(r3, &(0x7f00000018c0)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@getneightbl={0x14, 0x42, 0x8, 0x20, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000001880)) setresuid(0x0, r1, 0x0) syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f0000000340)='./file1\x00', 0x5f8, 0x7, &(0x7f0000001700)=[{&(0x7f0000000380)="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", 0x1000, 0x7}, {&(0x7f0000001380)="f586277b6625a7c193dd5316a192a3aa4aa7bdf48e6a75e6da3c8f1cc4cc165ca459b3e13d723b", 0x27, 0x10001}, {&(0x7f00000013c0)="86b416180334c3b0bd1ad1b47bd3595ad54e53ff5d6e7f9427be59e1a6eaab9bc86040ecc2e12c803566fb6435f4702152322fc0be2f97292f09f628d9de1e38fb0ecc254fa142b8f6660592bf22db19b033879247aa3bf659e631be5e5323e087992e511040837423bd0543be0e6b6148afd41dcd0913b77abdea29170bc4e6ac064ddc0e233d4bf18ea38122f4185507a54767f94c270bc92ba51ce8a2618a59166a17c0144ec6160601236427de1fad0eaec6e4004116cb67accf9c8455287c31b89ebb79ba31d29b83411a79e328aea5b635293a3d24ca60a4", 0xdb, 0x8}, {&(0x7f00000014c0)="a0e2a80453341d7553d605b6525729877eac79e511e8d44b0ce7827c7351438d725c8868e33403dd496e5f23e22bbd2009a60ed51b729503b839e1bb708a1e59e93e8b1d3e", 0x45, 0x40}, {&(0x7f0000001540)="6ff0a24ac70e083c21565c1fee185ed3984e1b27f4dbb8d0e2318aa4ed3ae4fc467f980fb6e207462958c04fe27ee54a10c67889d09f2434f56876df72ddffff18e3c5fa0d23755b5d864915eceb9356c3476256ddb8032836278eef2946ab4251449d4056a5dbe6eca0a1af167affa08c8911e185920629c6ffc30bcc00e6a1", 0x80, 0x1}, {&(0x7f00000015c0)="afdfbb722e45e49774a481fe6be8d4dea95c9bbe0c14e7ea7eefa0703f9b42d0dbc8e644248a1e8b52c23737dde3feed32b09ed89a2029e93853146375f616f556dcd44930b652e85083fc737b45871d9fa9771c8abeb15940439130588833528251a008e496a5c0059043e991cd97293060ffd09bd735e2661146d44f6332dfd16253df1b289d9db7272de431b53df4e278b07220ec0574022d4c2f589930b29b21d29dc4fed8156ab15c989c447992c461fa0d3c223cd9ba", 0xb9, 0x9d7c}, {&(0x7f0000001680)="1dc91e79c76058d087db3aa4aac159ea7e0a5d0ce589f308208675e233312c5067cd487fa7511d69ece1985ed14cf23360d1f193b0d3131c588cc0895f0ff8bd225ff0e06d3a4b793bb2", 0x4a, 0x5}], 0x20, &(0x7f0000001780)={[{@type={'type', 0x3d, "6747c5d5"}}, {@nobarrier='nobarrier'}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@nobarrier='nobarrier'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r1}}, {@euid_gt={'euid>'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@pcr={'pcr', 0x3d, 0x22}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'netdevsim0\x00'}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001900)=ANY=[], 0x40}}, 0x0) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000200), 0x4) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb4e) ioctl$sock_ifreq(r4, 0x8931, &(0x7f0000000280)={'netdevsim0\x00', @ifru_flags}) 00:12:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) sched_yield() ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0xc0000101, 0x0, 0x9}, {0x20a, 0x0, 0x80000000}, {0xc0010044, 0x0, 0x20}, {0xe7, 0x0, 0x5}, {0x27d, 0x0, 0x85}]}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 499.888494][T10171] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 500.131023][T10171] usb 5-1: Using ep0 maxpacket: 32 00:12:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_plock(0xffffff9c, 0x0, 0x80300, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r2, 0xfffffffffffffffe, 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000000)={0x2a, ""/42}) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000300)={0x80000000, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x0}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) [ 500.251173][T10171] usb 5-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 500.263202][T10171] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.304528][T10892] nfs4: Unknown parameter 'netdevsim0' [ 500.446783][ T28] audit: type=1804 audit(1599437565.368:20): pid=10908 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir516976060/syzkaller.VIQ5SG/39/cgroup.controllers" dev="sda1" ino=15898 res=1 [ 500.490783][T10171] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 500.500829][T10171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.508977][T10171] usb 5-1: Product: syz [ 500.514316][T10171] usb 5-1: Manufacturer: syz [ 500.519148][T10171] usb 5-1: SerialNumber: syz [ 500.666533][T10892] nfs4: Unknown parameter 'netdevsim0' 00:12:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x190, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa18d}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x17c}}, 0x0) [ 500.917202][T10171] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 501.136991][T10171] usb 5-1: USB disconnect, device number 2 00:12:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x1, 0x1e, 0xcc, 0x3, 0x0, 0x1}, 0x40) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000001400)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 501.759564][T10171] usb 5-1: new high-speed USB device number 3 using dummy_hcd 00:12:46 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="e516c3c97c5b643af45d3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 502.089588][T10171] usb 5-1: Using ep0 maxpacket: 32 [ 502.214291][T10171] usb 5-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 502.224860][T10171] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 00:12:47 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @generic={0x0, 0x2}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000a40)={{r3}, "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"}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="12011001000000406a40000040000102030109022d"], 0x0) [ 502.466698][T11075] libceph: resolve 'åÃÉ|[d' (ret=-3): failed [ 502.473597][T11075] libceph: Failed to parse monitor IPs: -3 [ 502.507848][T11079] ceph: Bad value for 'source' [ 502.556993][ T28] audit: type=1800 audit(1599437567.478:21): pid=11075 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15918 res=0 [ 502.614750][T11075] libceph: resolve 'åÃÉ|[d' (ret=-3): failed [ 502.614818][T11079] ceph: Bad value for 'source' [ 502.621144][T11075] libceph: Failed to parse monitor IPs: -3 00:12:47 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x1000, 0x1000]}, 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x7f) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x9) 00:12:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 00:12:47 executing program 3: pipe2(&(0x7f0000000040), 0x80000) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000180)={{r1}, "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"}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) syncfs(r0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x44) mlockall(0x1) [ 502.740658][T10171] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40 [ 502.749973][T10171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.758112][T10171] usb 5-1: Product: syz [ 502.762584][T10171] usb 5-1: Manufacturer: syz [ 502.967789][T10171] usb 5-1: can't set config #1, error -71 00:12:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x450, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x8, [0x5, 0x80, 0x8, 0x81, 0xfffd, 0x1ff, 0xfbff, 0x7, 0xf362, 0x5, 0x0, 0x0, 0xffff, 0x9, 0xbfd, 0x1, 0x7, 0x1, 0x1000, 0xfc00, 0xff00, 0x9, 0x7d, 0x3f, 0xffff, 0x8001, 0x9093, 0x3ef, 0x5, 0x9, 0x6, 0x1, 0x20, 0x8, 0xf800, 0x4, 0x6b6, 0x1f, 0x0, 0x3, 0x5960, 0x3, 0x8, 0x800, 0x4, 0x3a, 0x24f, 0x5], 0x9}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 503.010231][T10171] usb 5-1: USB disconnect, device number 3 [ 503.111134][ T8713] usb 1-1: new high-speed USB device number 14 using dummy_hcd 00:12:48 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d) r3 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x3, 0x0, 0x7}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x2006c004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x19400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x7d}}, 0xffffffffffffffff, 0xfffffeff, 0xffffffffffffffff, 0x9) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000040)={0x9, 0x100000000}) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x4) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) poll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 503.490538][ T8713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.501392][ T8713] usb 1-1: config 0 has no interfaces? 00:12:48 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x2, 's\\'}, 0x0, 0x0}) openat$random(0xffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 503.661753][ T8713] usb 1-1: New USB device found, idVendor=406a, idProduct=0000, bcdDevice= 0.40 [ 503.671364][ T8713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.679662][ T8713] usb 1-1: Product: syz [ 503.684008][ T8713] usb 1-1: Manufacturer: syz [ 503.689386][ T8713] usb 1-1: SerialNumber: syz [ 503.889582][ T8713] usb 1-1: config 0 descriptor?? 00:12:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x450, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x8, [0x5, 0x80, 0x8, 0x81, 0xfffd, 0x1ff, 0xfbff, 0x7, 0xf362, 0x5, 0x0, 0x0, 0xffff, 0x9, 0xbfd, 0x1, 0x7, 0x1, 0x1000, 0xfc00, 0xff00, 0x9, 0x7d, 0x3f, 0xffff, 0x8001, 0x9093, 0x3ef, 0x5, 0x9, 0x6, 0x1, 0x20, 0x8, 0xf800, 0x4, 0x6b6, 0x1f, 0x0, 0x3, 0x5960, 0x3, 0x8, 0x800, 0x4, 0x3a, 0x24f, 0x5], 0x9}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 504.186152][ T8713] usb 1-1: USB disconnect, device number 14 [ 504.409269][ T9041] usb 5-1: new high-speed USB device number 4 using dummy_hcd 00:12:49 executing program 1: syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="e0bcd7dd75928b5e1ea612bc0f3a10eff8c2dfe375e6bf6f5efba561e129af889137087a20019922e4f463f033389f2f9742d5b103bab190e90e60281df1f7c3cae0db8c862ad218dafb0b7f5dd1f6806597b0f1a51ae6917ef2e409ce1d7fe18ba35ee826efd572befb10ef6347e422301882558ae0d426cb9c16750356ddba056012e3cd732621b35fd878cdbddfabf47903ab367c94dfa1379327065a8a8a1212d84c29bfa291e9a9395e1676dc182114fc1c", 0xb4, 0x5}, {&(0x7f0000000140)="23e5d7a39225b26f9d889b4a30efb7d032c8d70805b6c2b15f6b0a984da38b641fc7a29287ef342df006ee43382a53abb8ce5bcbf1675305f35dbea21b79dee4d82fe96c02952ff6d7fc4c8039f96e794e78f4f25f742a83109b8d722014eae11f1d29c91dcd1f70792b50767d21fbd14348516a93767e7848140af33a09358ee08acaebefc4", 0x86}], 0x2020, &(0x7f0000000240)='#-)$\xa5}\\\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) fdatasync(r0) [ 504.809490][ T9041] usb 5-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 504.818941][ T9041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.918380][ T9041] usb 5-1: config 0 descriptor?? [ 504.982510][ T9041] cp210x 5-1:0.0: cp210x converter detected 00:12:50 executing program 0: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) r0 = socket(0x10, 0x20000000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x523, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000001c0)=""/23, 0x17}}, {{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x6, &(0x7f0000000800)=""/121, 0x79}}, {{&(0x7f0000000880)=@ax25={{0x3, @null}, [@remote, @remote, @bcast, @rose, @remote, @bcast, @rose, @rose]}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/248, 0xf8}], 0x1, &(0x7f0000000ac0)=""/48, 0x30}}], 0x3, 0x10000, 0x0) r3 = openat$cachefiles(0xffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000900)={&(0x7f0000000180), 0xc, &(0x7f00000007c0)={&(0x7f0000000b80)={0x9c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8ffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071008000800fe0500ff0800050000000000", 0x24) 00:12:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x323, 0x57, 0x4, 0x4, 0x5, @remote}, 0x10) ioctl$UI_SET_SWBIT(r0, 0x40045567, 0xb00902) [ 505.169821][ T9041] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 505.177886][ T9041] cp210x 5-1:0.0: querying part number failed 00:12:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4e, 0xa}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x6, r0, 0x1, 0x81, 0x6, @remote}, 0x14) 00:12:50 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, [], [{0x400, 0x0, 0x7, 0x81, 0x55c7, 0x4ff8}, {0x1, 0x5, 0x3, 0xfffffffffffffc00, 0x6, 0x7fff}], [[], []]}) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$setstatus(r0, 0x4, 0x2000) r4 = socket(0x10, 0x803, 0x0) ioctl(r4, 0xffffffff, &(0x7f0000000380)="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") sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b12010067656e6576650000040002800a0001000000000000000000c9b9857f5e88e3150e19886aba09421a87c60bebb121227fe959932717687f77e295aec2fe812235f2420268c4045eae7380bfa1eb27868fab05263b30249b7a555be25fbf9ba8350a239f9d6545d242ba"], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x4, 0x10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000300)={r5, 0x8, 0xd0fd}, &(0x7f0000000340)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000001780)=[{{&(0x7f0000001380)=@alg, 0x80, &(0x7f0000001640)=[{&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f0000001480)=""/162, 0xa2}, {&(0x7f0000001540)=""/234, 0xea}], 0x3, &(0x7f0000001680)=""/241, 0xf1}, 0x809}], 0x1, 0x0, &(0x7f00000017c0)) [ 505.895538][ T9041] usb 5-1: cp210x converter now attached to ttyUSB0 [ 506.095141][ T9041] usb 5-1: USB disconnect, device number 4 [ 506.110347][ T9041] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 506.119746][ T9041] cp210x 5-1:0.0: device disconnected 00:12:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) sendto$x25(0xffffffffffffffff, &(0x7f0000000000)='<', 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc008ae88, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e21, @multicast2}}) socket$inet_udplite(0x2, 0x2, 0x88) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000000004800006c0000600000889078ac14140059faf87d40b135ac1414bb0d009078000000000000000000"], 0x100c) [ 506.501797][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.657035][T11178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.727509][T11178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.738477][T11178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:12:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ffa", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x40, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000005c0)=0x2b3, &(0x7f0000000600)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/100, &(0x7f0000000480)=0x64) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0xc) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="078dc4a600b410e0cd235755c548ab077e1ab47f72c0ed57bd780b9f4d73a0dde20034510eb6"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x111, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400d080}, 0x41) r4 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r4, 0x9, 0x4) read$hidraw(r4, &(0x7f0000000080)=""/218, 0xda) [ 507.179825][ T12] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 507.344084][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.388029][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.408720][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.416986][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.666873][T11190] IPVS: length: 100 != 8 [ 507.704305][T11193] syz-executor.1 (11193) used greatest stack depth: 3816 bytes left [ 507.739942][ T12] usb 5-1: device descriptor read/all, error -71 00:12:53 executing program 3: io_setup(0x3, &(0x7f0000000100)=0x0) r1 = socket(0x10, 0x80002, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3, 0x3, 0x401}, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x38}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c851}, 0x40) 00:12:53 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r0, 0x29, 0x3b, 0x0, &(0x7f0000013000)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x400c011) r3 = geteuid() getgroups(0x3, &(0x7f0000000140)=[0xee01, 0xee01, 0xffffffffffffffff]) r5 = getegid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x0, r3, r4, 0xee00, r5, 0x26, 0x2}, 0x0, 0x0, 0x2, 0x9, 0x437, 0x19, 0x0, 0xfff, 0x2351, 0x7, r6, r6}) 00:12:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e20, @empty}}) write$tun(r0, &(0x7f0000001240)={@void, @val={0x1}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo_reply={0x12, 0x0, 0x0, 0x0, 0x0, "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"}}}}, 0xfca) 00:12:53 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) 00:12:53 executing program 4: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) pipe(0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 508.609052][ T8720] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 508.671102][T11221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11221 comm=syz-executor.3 [ 508.764772][T11227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11227 comm=syz-executor.3 [ 508.866193][T11221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11221 comm=syz-executor.3 [ 508.899085][ T8720] usb 2-1: device descriptor read/64, error 18 00:12:53 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @default}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="0bc9f2f598332913260d3970aa2f1f97d7f5") [ 509.289358][ T8720] usb 2-1: device descriptor read/64, error 18 00:12:54 executing program 3: syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3d, &(0x7f00000018c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3b221c92b164260c7f41cff65d9befc1d012d18ee13c11ea7ab19b40a3d6b463a2e51543e8bb64f00700ee4d6bab6b26766940e176fd3ae937738594e9827a89ed53da505adabb981835bd99ba4334811f8f6900333ee01031be7e377dce579fe05bdef69dadab186a02e46fdc85197ddd7144ae82ccfd6a5918b478c7ad19fa9bcd46ff7c393ae442e4f09609b7b157ba2ee75106d8778ee9c96d1eac49b2bd590dcdd518794e8487ebb529c6089b63158f26b5f6eb"]) [ 509.559483][ T8720] usb 2-1: new high-speed USB device number 28 using dummy_hcd 00:12:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x402, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x100, 0x7, 0x0, 0x3, "871fc3bc8ce7507382b885dba923633d2b54e7"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setgroups(0x0, 0x0) stat(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000098180a00"/20, @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x23e6, 0x9, 0x3}) [ 509.849549][ T8720] usb 2-1: device descriptor read/64, error 18 00:12:54 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="180000000000000000000000000000007b020100000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x28ac2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000180)={0x8, 0x6, 0xf5, 0x478c, 'syz1\x00', 0x357}) lseek(r0, 0xfffffffffffffffe, 0x4) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x6, 0x10000, 0x3, 0x7fffffff, 0x7, 0x5}) [ 510.125985][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 510.214943][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 510.261995][ T8720] usb 2-1: device descriptor read/64, error 18 00:12:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2020008}, 0xc, &(0x7f00000001c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="b8120000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12b8}, 0x1, 0x0, 0x0, 0x40}, 0x20044081) close(r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x3, 0x0, @reserved="1b4f5bf00c9f19db85966dcf961a1a6c47d719d333949f0b7428d298f7998117"}}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@deltaction={0xec, 0x31, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ab9}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7b000000}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0xec77b29ba917a398) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 510.412020][ T8720] usb usb2-port1: attempt power cycle 00:12:55 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() tkill(r1, 0xa) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 510.731847][T11258] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.817388][T11249] ntfs: (device loop3): parse_options(): Unrecognized mount option ;"’±d& AÏö]›ïÁÐÑŽá<êz±›@£Ö´c¢åCè»dð. 00:12:56 executing program 2: unshare(0x40000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x0, 0x0) sendto$unix(r1, &(0x7f00000003c0)="5f18f203b8eaaed4e247825ea7f80bcbf762d2d8cf544ae6be2b1612120ebc6e45a68464d76dd73b8147954add06d54fdf1519a0240eebfe44de9865b2f1e396115c7c52097c414b2c65551bef4627a23438badf429bbd563aa514a792353555836829eb23946a439fa0737b2949e33d", 0x70, 0x0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) readlink(&(0x7f0000000200)='./file0/bus\x00', &(0x7f00000004c0)=""/240, 0xf0) lseek(r2, 0xfffffffffffffffe, 0x4) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000001c0)={0x7fff, 0xa, &(0x7f00000000c0)=[0x4, 0x0, 0x1, 0x3, 0x83, 0x4, 0x7, 0x93, 0x200, 0x800], &(0x7f0000000100)=[0xfff, 0xe8de, 0x5, 0x3], &(0x7f0000000140)=[0x200, 0x6, 0x0, 0xdd]}) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @local, 0x7}]}, &(0x7f0000000180)=0xc) 00:12:56 executing program 3: syz_usb_connect(0x0, 0x137, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x13, 0xc7, 0x51, 0xff, 0x7ca, 0xa805, 0x98d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbb, 0x0, 0x4, 0xb9, 0xb8, 0x62, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0x8a, 0x9, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x1, 0x600, 0x8, 0xf8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3b, 0x9}, @generic={0xb, 0x1, "c8351a3398f0bdc0b4"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0xff, 0x3, 0xff}}, {{0x9, 0x5, 0x4, 0x2, 0x18, 0x7, 0x1, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x85, 0x3043}, @generic={0xcf, 0x8, "e3f8a56fa277f1945a3883e8cfbbab5392de51a1f89c238120d47703423054e8c3d73ab3b274c47a549df1e501f61a85ca00301a8d62b87913b12decfbab304642b79a0577c8584d91864713bc3e83cfcdb722f809ee2e978adc31077f6ddc420c93e327398a7afcf03c27c309297fd1ece86a1e3fea8f43c79e04cbbfc8b5707e64bee7d6d648406a7d3a7cdc7f6c7bac0dff9bbf6bc17543e7b6743cc7722357835d00e61094e9e545b883a34e0813ad51c3a9573ba79451fb06e79ee18958b525b4377063888774d0fc0641"}]}}]}}]}}]}}, 0x0) [ 511.128928][ T8720] usb 2-1: new high-speed USB device number 29 using dummy_hcd 00:12:56 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x80) r1 = signalfd4(r0, &(0x7f0000002280)={[0x101, 0x5]}, 0x8, 0x40800) lseek(r1, 0x1000, 0x2) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006040)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/101, 0x65}, {&(0x7f0000002180)=""/231, 0xe7}, {&(0x7f0000002280)}], 0x6, &(0x7f0000002300)=""/116, 0x74}, 0x6}, {{&(0x7f0000002380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002400)=""/233, 0xe9}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/4096, 0x1000}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004540)=""/9, 0x9}], 0x1, &(0x7f00000045c0)=""/239, 0xef}, 0x5}, {{&(0x7f00000046c0)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004740)}, {&(0x7f0000004780)=""/200, 0xc8}, {&(0x7f0000004880)=""/86, 0x56}, {&(0x7f0000004900)=""/133, 0x85}], 0x4, &(0x7f0000004a00)=""/244, 0xf4}, 0x80000000}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004b00)=""/117, 0x75}, {&(0x7f0000004b80)=""/180, 0xb4}, {&(0x7f0000004c40)=""/38, 0x26}, {&(0x7f0000004c80)=""/4096, 0x1000}], 0x4}, 0xff}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005cc0)=""/46, 0x2e}, {&(0x7f0000005d00)=""/209, 0xd1}, {&(0x7f0000005e00)=""/75, 0x4b}, {&(0x7f0000005e80)=""/65, 0x41}], 0x4, &(0x7f0000005f40)=""/255, 0xff}, 0x7fffffff}], 0x6, 0x0, 0x0) 00:12:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x2, 0x1, 0x6, 0x0, 0x1f, 0xe636}) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="64697371626c655f7370617273653d79cb6d72207cb6fb675b5262fedc1865732c6d66745f7a6f6e655f6d756c74697039fb3e1ef6f92bf0fbd188587aec60c7b42d209017c96d9d092f6c", @ANYRESHEX=r1, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000000,mft_zone_multiplier=0x0000000000000000,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 511.421940][ T8720] usb 2-1: device descriptor read/8, error -71 [ 511.460640][T11270] IPVS: ftp: loaded support on port[0] = 21 [ 511.652179][ T8720] usb 2-1: device descriptor read/8, error -71 [ 511.840213][ T12] usb 4-1: new high-speed USB device number 4 using dummy_hcd 00:12:56 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x80, 0x1a1000) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000100)=""/246) close(r2) r4 = socket$netlink(0x10, 0x3, 0x9) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x35, 0x0, 0x0, 0xfffffffe}, {0x80000006}]}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x9, 0x4a1, 0x80, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r5, 0x1}, &(0x7f00000002c0)=0x8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 512.079289][ T12] usb 4-1: Invalid ep0 maxpacket: 512 00:12:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'team_slave_1\x00', 0xff}) listen(r0, 0x0) sendto$inet(r1, &(0x7f0000000100)="f81cf1441db1b99ec745b11bded1be19d110b40b721983dd401e56d0dd429d8295c2dc2c95c62a16b31aeb13b6f9d5b980c78104993531a4f0559be61da465f1c4ef38dc70e91785ff43b32e79b776cf2c3deccedf6a797af930e7ba21add5e2c1c1da0403f720fed41a85d40c6341c755d190fe5d2c00fb40f77f4b3fbbaa259ddf2f53e16503843c033f4d7965f743db7631e20c0bca2c451d33a0e85b2b4aa5a76c1f17335e10c5967fa11e16ca80cfbbec2dd64e0383ae4d73fcab785bd68c7639fde0e65c9e4a12287ef322681c0a", 0xd1, 0x20000000, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x40, 0x4) syz_emit_ethernet(0xb6, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x6, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033e, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x3, "b7"}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0x8, 0xa, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) [ 512.228748][ T12] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 512.249931][T11270] IPVS: ftp: loaded support on port[0] = 21 [ 512.469371][ T12] usb 4-1: Invalid ep0 maxpacket: 512 [ 512.476660][T11309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11309 comm=syz-executor.0 [ 512.488307][ T12] usb usb4-port1: attempt power cycle [ 512.562217][T11327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 512.621594][T11331] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 512.652572][ T944] tipc: TX() has been purged, node left! 00:12:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x80c2}, 0x18) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10b041}, 0x18) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="b2", 0x1}], 0x1, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000280)="8a", 0x1}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x2000004, 0x0) r4 = openat$vsock(0xffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x480800, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 00:12:57 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [{@euid_eq={'euid', 0x3d, 0xee00}}]}) 00:12:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000011001d0f9efb433c0000000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/12], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000004feeff15ad6d4b9db442d4da8d1ef7000014002677e36f16b591d464bb08a6882f12800b00010067656e657665000004"], 0x40}}, 0x0) getsockname$l2tp6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x20) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 513.268606][ T12] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 513.369422][ T12] usb 4-1: Invalid ep0 maxpacket: 512 [ 513.432686][T11340] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "euid=00000000000000060928" [ 513.456948][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.472108][T11345] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.485985][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.503991][T11345] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.519118][ T12] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 513.536097][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.569434][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.610280][ T12] usb 4-1: Invalid ep0 maxpacket: 512 [ 513.630503][ T12] usb usb4-port1: unable to enumerate USB device [ 513.673722][T11340] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "euid=00000000000000060928" 00:12:58 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x100, 0x3, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 00:12:58 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x203c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r2, 0xfffffffffffffffe, 0x4) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000002100)=""/232) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002080)=ANY=[@ANYBLOB="8000000000000000", @ANYRES64=r3, @ANYBLOB="0700000000000001000000000000000036000000000000002f6465762f635ca76cb037efc50fb900004a314bff317b3ac4f141a6378ed7cf00e92386e2d1a8b45f000000000000000000000000000000000000000000000001000000000000003a00"/112], 0x80) 00:12:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x3ff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="030400000000000020001280080001006774700014000280080001"], 0x40}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000040)=0xff) sendto$inet6(r0, &(0x7f0000000100)="0503460008003e0000000200c52cf7c25975e605b02f050000002ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816167fd8f24286a57c3fe259f3314a3974bb654697f462f4c73", 0x50, 0x0, 0x0, 0x0) [ 514.117046][T11360] CUSE: unknown device info "" [ 514.122424][T11360] CUSE: unknown device info ":" [ 514.127326][T11360] CUSE: DEVNAME unspecified 00:12:59 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000007c0)=ANY=[], 0x120) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 514.510879][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 514.527218][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 514.668515][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 514.684242][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready 00:12:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x31c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffa, @remote, 0xaef}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @empty, 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfff, @private2, 0xfb}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2a5c}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x86}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff94}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x297c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff1c2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40}, 0xcc40) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x25, 0x803, 0xffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xffff}]}}}]}, 0x50}}, 0x0) 00:12:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, &(0x7f00000004c0)=0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/164, 0xa4, 0x40000000, &(0x7f0000000200)={{0x3, @default, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:12:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x5}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000000)=[{}, {}], 0x0, [{}, {}]}, 0x70) 00:12:59 executing program 1: socket$isdn(0x22, 0x3, 0x21) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000100001082bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2400c091}, 0x4040) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000011, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='cramfs\x00', 0x1) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 515.049507][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11377 comm=syz-executor.0 [ 515.167062][T11380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11380 comm=syz-executor.0 [ 515.192551][T11383] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:13:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x4c}}, 0x0) [ 515.584354][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000007fadd7a994e47c37cbe389248abf4f0000000008000000f3028005001500000000000000000000d6d82cbdbe2145cf689eafa292e8a112f0ea6b51a96c00e196e236ceaeee7a46a2083832d217a4ede57762e850a40c83b3a9252908b205f8f516ff5af6bc3b067322ae07f327a1462120516c35baa2500439365b6202f8c922868b10bb651c3fda7153dac3f96673ec43a3c52e8e6c88691a9ce54b5cd0f20b9ca523e610b8be8453a79cebbe6543db76319fbbb9a0f1fc7632cbcef8f649b57c10ee07c957a2fe97a5225373931a7bef1c9a7e0c85fb5367edc2fe6f1c647898d672b38bfac0807ddaeed24111bb3f760b"], 0x44}}, 0x0) 00:13:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt(r1, 0xffff7ab7, 0x8, &(0x7f00000000c0)="5dc64e45553b83eac14142be3f3016441061db018045e84f870822cb8c2e6708371ad0b7c5469a56b85a6bc94d2096437a99b7b6340193149fe2472b40cfb674e1d086d22957a0de805f2da28ac59971f19407f3b840b88635a1b2f05b531ecf55e54814d4405ee9555732f33cc387f788bba0bd7d209dc3c3e39f74200097255bfa7450877334f84d7f5c25c628592bdc78e1dd88b4b3759686d6c12c62ee32aa2c5422d7c3b393", 0xa8) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600bc0d9823a0df5fffcd81623924542033bc1bfb3edf881020a0d18dcba11717f261d6758ad441b14b0a39d8de8266469e5714c5279ac5a13734e0ced087a359072e9906e84935cf231bad68b1229993c559b3dd3811ac28f3648b0b481faefc9bc9d580f5521c400d48510cf44dd57938194ed275ee6c0d921138d9b5d886064d0f4694e5051b745392a431d4b13b391124e6bc0f38d68d8389159912b28264f3984dd3c46f5157728847e78b7905b0fc3e50a6050251ac8d499764894b", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}}, 0x0) 00:13:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x5d, &(0x7f0000000180)=[@cswp={0x58, 0x114, 0x7, {{0xa6, 0x7}, &(0x7f0000000200)=0x81, &(0x7f0000000240)=0xffffffff, 0x7ff, 0x6, 0xff, 0xffffffffffff8000, 0x7a, 0x81}}], 0x58}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) 00:13:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0x0, 0x0, 0x98, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x4e}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x260) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000200)={0x6, @local, 0x4e23, 0x3, 'nq\x00', 0x2, 0x0, 0x41}, 0x2c) socket$netlink(0x10, 0x3, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000180)=""/101, 0x65) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@v={0x93, 0x3, 0x80, 0x16, @MIDI_NOTEON=@special, 0x6, 0x800}, @x={0x94, 0x6, "7716a9cea236"}], 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x10, 0x8, 0x7f, 0x0, 0x0, 0x1, 0x10008}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0xef}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x2c}}, 0x0) 00:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="080008000000008722"], 0x20}}, 0x0) [ 516.295705][ T944] tipc: TX() has been purged, node left! 00:13:01 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x8, &(0x7f0000001640)=[{&(0x7f0000000180)="10222043aa836735b1f27f6dbd1a789b6c0ff9cbadc48fdc1a53839d919c76b39f68896f3d84a808bd661b8ad44de6e47a7d8c9ea54997318dc6ed981107a0c3e4fcf9244b345bf9753d1c47327fc08500f91d9c2d", 0x55, 0x3}, {&(0x7f0000000300)="5938c46e66cb785bde3b0741e6228424cd0d57f6f8ad118653db837ead9ceda4014a9dd27c319d2be16e6cd81060d14afe7098caafd263f5f022eaed2fe71246166a79a8f4a18f6d47e4af33ffc7e25c8ded59954d970bd1841b3e578f9b2b257514bcfb3741b5a644999874", 0x6c, 0x80}, {&(0x7f0000000380)="547015229c650f90f5a6e98f9f2d23e23abafbbe78fce66c32c1d7b2d832aada56464ba64b7164221fc768bbe254242f4bed9961a9ce70bd4642e94ccffdff78a1882ec1d77538ed9624a45748d17ee807b4cd0a03ee096956eb07729c71b21ce947c29996b3cc74b6a2dd9d42435f180c782dad584e9ebaa0bb27e5730ff2042ba6feb1965152390c63d567720874ddbd064dc6e3b65e32be2032225ded5c3787316fbb7c4bada32f768daad91cad97463f14924b6ec4ee8d84322b8d0fe5da3d05f210db80e164a51e936ca7cd5f19f5289f78dae42c2fed27425d5b7bda83f522d456976cb755ca5411c396247365045d516cdad398c258e84cbcb88e55b3ee76b63959387abbfd8464256ade88c02c7dc7b6011dc43c32806b820191c22bd6f2fab344ad9d985c8e15f5822d17f3ef2b87a990a0c996155c8aefb36a10c5ecc80e37256cb21032674281722af874c929fb63ba24f594135d4dfe8325495fc58f68817f9974df2a824df5a4469e063fc00a752d75ffeba1458904520667c5ff13f2bac1220826fbe12b9d44c92015246e508218cc0344b97921efdf0e7584d689b31256c0d1b2b65cb1ce99108cc4c0f76ef364840814bfb94ada91be962b24e5e55e297cfb8bdc269539cc51f4e2d36151276cd5f61e81ed50132c2dce583692566f8be535ff1d5a817a21c9e1a6fc51000f5dd953d9daee211e1b8c1c21778bb12cef588135b0fdea97598b0a8650195825a53149da8d4883d4be348e5b23216ee9a0ee4cac4f7897d6fba98564ba433adf6378ad657bb91b024e177baffec0afa2e7e82f64c13bd29eabaea2517a920da7cf9a3ef7a5a05d4038ac844ce5df4c98c8c9b5ea3bfceced2ca608831ac14de07d6505a7a1023526284f21f44d8a6756e691981fb309006b587635b2b399759c8932e04f68e52dfb9a4442c29d533027f851b99a695ed069c05ef67d38a493b6006029279dbdce4e3f4b2d760c829004a630f8beb79d578d1df1d6a3a352933eadc7379b46030c0948bf551f88d212e779bf0e02815755c21ca10a8b5e84593a25e917f41f4f7dde677e0069d86b0c7d5b0b7d824f6799fa3bc92463618c1dfd9ab3470fb9e22877a73e65488c432a33a68796eef921b42aa21d4e8384c39a49cdcc1e3ad491d6f252d62d7b868f9ad14c1ace77b98c7cb126c27d800d4f2c897680ab884d0ef78b2d016190c831cc66e049563b7b0ac5c71ec16cb0caac954db58c06e76aa77fed7eeed2de761575928e1afe6235b6f7b75440421020d433f8f6af27ae7b3df8b3d6693c227bc2d09b083c4312b7aa669f2592b90beb98b6eb4cede5cdf7b75c538f0abebb0da1251250754053aaebb27394de526d3617f8be7aa61c990440a1a99384b6d6b7950d5460b6ed327c72a151d268d47a8ed8542bb37c03c77ca24634d09125e0141297affaf79cce50d11d16eff442c160465f710263203c3c9a412bb8d2f4494946eb4779963f23354e1bf4c99c2138aadd6b96089ca518dc4935e15770768516da32262f03cb3b94550cf8bb337d29cc879ef7ab9ff4a866dbaa983e43e3f50cbf7c1be2f7b55b8538a551163888b2a9205772982a24e383ffde83fcac1c90d23996363b02395560017e7b9703528c22b0f5d80a3b80791b50b946cfcff040d0cf771be02614e9ea4edca46279bab6b5896aa0354733e8b215eb9f4ca9df9eea37317fb501d821cae3a488fa978ed97d5b81a278561ce255df11dbc3b6d39ff79e6dde4f13c5cfa304acfa20c9376a6f2d31968740065517aa6d3b95142a71cdbe004d7c6d176d254d0c0793c70e5e84a8c99810231e398b1f1f5d621c6a4f43f14b06a2fa22d8d993275f1c8f75979bdc85980eb1318627425864b31ebca90abdc5e455169f276f310c518261fcd50a6f14580f47f8eb8b11347476bc9c5595d905fa032822440f00d6e66162a6448129bc17cf29066f3daeb04d907b8014f5d354fdf92f191d05372981a14b30a1536d826402593d0de736f4d052c47ed91bbc8241f2d9b339069801df084d50fd90fd59ee9c8baf62f7e1d90aa5c40983e882ef4be98b82aff378dc0960b95aaa4b7f84e70cbbe942c849d12277cc7504eef2ed10bc77b951984d97651b05c6f3742b96648e76c1410d9bb883635cecb22c40c83ad2ca53bd007e4a93ce4f20160a84a94d3a623a0e2582a09b1151831bffa9bb1a0d5077c8243e93b43cb48aa1673cafc6acbe9426187b3dbbe3d2652c2da830e64efce3aef9c8932acc88994a825fe9796159de1bc9b566dde3a84211e7a11f0e4fab1549bca9282368b97dfd9cf54a075d23645edf512b8fb855abef8b6c7136ad0f4d3cbe59a379e9b1b42bf2616a5c999e47f5673a1980f117d0467b8693b168ce95d162f32eaf03cfee4b61bab32de1e7811915b1304022ec425cbc0c193ce552e6349a9d33ef422e76b2a43ff488750e6f06aed1fcd9b67d492de3e2b6c0e94511494446c56826ca5898b5e4caf84c3df1d5a2519467350b4597c2ec47778aa360ab8fea3f1bfc1e13a13b96e0fd8106b305d3eb1d963cadee0a4d3b035e4f138404f2c90b9b33a02a0077814b34702a32cda83619566a0f538140d41affd9718e372bc5755d841a3dd5595e3fb8275451fb596604293ff7fa670883ac66e678c70468d6bdf9a4f207c6b9b03a2f326ee5a069dc078a40d208c1efe8fbec0280fb3ef207b0471e2ded47cb10057fe7df95747e16bd5797a55bbfe8b845c07339c6b626738c9be2edecdbb690dfa3f861b920e39767a56ca024842466b4b755032c9119eb9792a2c930c4867823e965ecc124e34aebc36bc3426c86f83cedb78e2b743ed7529d24e71e9d9a6646b8192652f9803817172da5a374543725bdd1ff76f76da4319cb48509d5941cdae3023906588d68f4e5df05a1fb232be2ca8904b5a67eaff57e4f9757398ad2220f1a38554c4ec3eb8268a9a519f2649208ab297bcb1a409b355c3002c8add638a9769bb29cd3e449d8b970cd6915219912827a125279a3fad2795f0d04ebb2d1e7c82186ec860971cf4b280e077075ca4880a9370adffd90433fca736ffd9eaea8ab96a714ba2fc2931a845a1aeffcf6537bca8d8e3c12418adf30efde1ed131a61a5254906b8d506f4424ffd47dd59e2e4f0dab76c90bbad05ee99ec0796e6d12daba620be2457a4fe84eb8bc30f7aed0f8b2287f7d86c3d4751fee35cdf155d68cfe8392af575844b5f52d9a242e17af87aff8b5ecafe81be61cf0052e086506a453198ca99ee45489f7e1c5e2ae58c036e86ea0f6c058371355b8453a17b357d8f80a63787b89abfb99c43b1c40920c552c829a93132c124dc1415afdbd5dde459dfe1e1dafa7d141a1c7c5b4f44ec34dd646428713ff45f6cc120800f61f1a183580e53e973a377f676a5b40ef1120fa4d2579b592a4a56f76288588bca93b72b376e040f954fa52924cb344189d881939ced3da2f8c47ae5759b4792fb41da8cdc6e7f5413c8081d997f861cb37171fe156bd662986f5624bebb984b704d19d34ae1452d096fba267ab8da8745b6f92d6f95413938c997dd59684cc367796af8d27a7963bdd5b79d0dfd7ed13b1c90f52b4aa063bf33a32a2d0e42a03d2101041cfdc4c545454bc0aa0146be2bfbb0ad1e433774030871db9bb683e0597beacf70d51ebe184c3fa56c23f3e77056be5046c493acb19ae921a375fa163f9ac33a82503d3ab2a5ab7f1359692237a2fdebc956cc24f4b5c564a775ce18ed850fc532ed4aa7bf9df4b98c83634e2c0a81fcddbfe9533158aced7a1f42d63ff2b595099743da1150d4e148f1bea1ac55465ee7e9120dc2eb02b555bf98a7dc21323ccd6a2b8230846b87bc16ed512413797bb20408bef13b5e08fdd83ab33b30039a6ceddc6d8f8d11d70525b2e4fff847ad43f8e12e313d5c516d7a92c571c06063aeab484d527a61dd7ef8681c389f3613d1c64b9d7c5bc8c69affda81fbacb1b64e2203757ab375f31764db9c932211ebbb798e80724b33e5aca1982d8f49a766dddc778f19018d6d575ec5fedd69071d5778ad8afb5f9e3e98c9030934d916969971ba0930fcea3c0b45b8eb912815b2b5d12b2bcc61076a7f6649ef72a1f82f7483e0aa6a3d55338105a0b3a4f0f396bf4249502b30c3504dd034de83a99a1293053791fdf10249212bd35bf6f5458dceb2d876ab362ce8f6f8dd847f90af2640c9c40c7ad6f52f31a0feed84010ea6a0e5db5b769ff12cb84c164f52d596c18a15ed7c526931c4aea1e73bc54ae4d5f1f846f6b7d684846f5db17d78b7138f1b47f8766de666812ca1bc1cadf3640d40ec4e3101dd5fd768b69b536e032c0272411a5f6584796246211c9e036d9ad72214849be4c0d834aeafb05be9acf56cdd00a697e02c71aeae8738ede48877070c2f05a058a0dee6c5a4222d683861d987c0ec5b50b2fcac2c07aa3e25c5de31d149d5794cd427074a4df5e60c923c22b08aa670711821a17bb61465eb335f0672bc07e3b2dc08e0fa04e5fa2f8fb0646bde00519c6ad63f7431b7a5253209e0e736b1e92cd722b5bf2b4202f6ca2fc7de0bfd8b1c46b53032501b05277d7c787d0cfeb8c2403b9c950fc9ec7293d64183fb9d9ae97b597db01b8a4259e4c2747163791ec50f46bbd3f178172e8aeffe7d35c268578cb7cd861dff6dd2cf05fb683d55bb51609bbc30c559884de03031676c6e8ec57d551bee4617cf66d78ede068af00b9ab38d674a80d447de1707f7c4fe82142906a7dd6a6194b044315a4965be2ed7d54c8def19314caabe44ec25b2446c681aba7e5def2db05acc9e4c439fd36e58b72989879c068995dae77c1c63e4cf402cb2d74e7c15ea99082e8df7ac4f0b18cba4fdde5303e3a3bf829a2cd2ea4b10e54049604fb003c363269d07ed19590ba13a997ef8774afc8e4bd8a352913fe2e617033e0b7806d32b0c7ce5a90927b9fc23b124967c4f9db72facf10c5db758f61773cc9235b36edd662a8593dd4bc8cbbccb975de4ea1dfbe3f76589b905671fd74877d7a74d7f1c6418aea155ac6dae7465beb653927f0e71e546c53c49d092468fdd6d3fa2ed994c86e12742c7e51eb69a1d5804957a950d9908e3f3f75264cc782c1921bca982b2ecf9f00bf539eaad8b072b2bef0d6767b075915e249cbe3bddaa80c55dea9e22523d0200757e357a91d7147a711e6de8a0ce94ba22c3ed209bcfb8a8a49d0375ce9e20f880a410f4f775fe2c61c4360d9b5af852d6fb453d53ac559bf1c82c3689964be88a93c1c4370f0471ed7c0bd50024d8c974b9beade6c57692b560b25c8db9ed281a7cc70d2e4d8bf15e0375672f2d704f79a8c21dd52cdabae22ac106261fbd04417a350f087dd1883fe2ee9dda9663942ed823a1ec3fc9158a1f5ff5c4de9c4b92323e328d079319aa34394c3be6aa9ee0c8b453b4a81ed168c9fc7afa5243b3f50c10cde324ed272c25716f9e0adcb4eda15068244a28e256ef5f67821a7c6d02bc61bb785c2d9148db3462b16a2fc2644cc6a27b01252a89b1dc6d6328a2e71985fd59f81e6fea5d9bcade53c9a9608f3aeb9a86802d3c49e7f5fcc6b74994b5bd876a87d6509cf072a40b7d839ca30ca9bac8c261d782dcb5f59046f119272aac37c32c6cdda236a00d186c4bdab840a55e4012163cc4dcaa1a5828aff847222be3382572cc002880483e68e19eac78373f9e4b9a63668a6631f35edb6c7b68355dcfec3830be5ea1bd5b2308f9f82536ba7e6f582dd55", 0x1000, 0x2546fe15}, {&(0x7f0000000100)="d10e4b70402186b28a9277fdc3e88594160887fa9fcd530b621d4efd258dcfc75785b246e6f1fe9997c06b", 0x2b}, {&(0x7f0000001380)="56a9096099b9bf521e8187da96e1bff723f12f042c356dd0bc381c42283aa3350036b00554f4d1152cfdc2002c13c613164c7a98833b1b42854ecb7abcc8d27555e12c7e6e851bf7b0c61459df185a7ee94b2a6eef58f05baab40f72a89ff9691080d46733590f56d8f91ecf74735cffd8db680441db605d85f4db3e8e8057dbd323b8cd4d26f556e4c5036762fe0273690bde34a92bb26bd5a1b1b0f4c7f07ee2b609d2c0616dc9", 0xa8, 0x5}, {&(0x7f0000001440)="439c6d53ac073cd5e572e4366bd72a17c41c422868ae846f17ee1848bf6faf18d73ca1b51578819a08e9114764e7df97297776c74c464e8d2865f8a58f585779eec89ddbd624c6fe3a224698b2afac1925306069920161fa9390af17551ea3c026c1daa8384a7763258b606f0915b4a5bc", 0x71, 0x9}, {&(0x7f00000014c0)="5795765c4025510a1c679bdaf49917b33cbf1a094e45675e47002cd8196032e1407ec49f8c879bfb2147c7a483956866c8c3fea12a60615dfc0c0eba2064677a98217be0d58e5f25bb42240e87ae5e70b152fe3deb3a9c246f52807785ca180dea8bf68c3b132d013dd979fc757a32628fedecb9b1210a6705462da95d9476962605", 0x82, 0xfff}, {&(0x7f0000001580)="be34137739a794ce6b90b520e98fbcc939b2060bace778e58ff9e709f1e49e3fad283a34482cc373229da471d07ba48a6c56bafa0c9a8c5c3405986a37c4e97affccd02ddca6132c7c19893d111f2431443ef559b3b401d8c9ed8fae709d30164b8468b4928a32130283fc059843041694d9d004d3dd21555e7135e7c2f02dc99c19d78e1bfa55585ee1d43c59921706682efffc34023ae4a8d9159dec108ee61ed7b3f8f34c402f9351c5d04351ca51283d", 0xb2}], 0x20001, 0x0) 00:13:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f00000000c0)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0x36}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000200000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000020a01020000000000000000020000000900010073797a30000000000900030073797a320000000028000000080a03000000000000000000020000000900010073797a30"], 0xb0}}, 0x0) 00:13:02 executing program 0: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x6, 0x0, 0x8, 0x9, 0x20, 0xef, 0x1, 0x0, 0x20, 0x2, 0x7, 0x2, 0x1f}, 0xe) 00:13:02 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='openpromfs\x00', 0x1, &(0x7f00000001c0)=']/*/#[\\}\x00') r1 = memfd_create(&(0x7f00000002c0)='\x00\xc1\xf9\xe7\x7f\xf3\xbdi\x80\xc7\x10\xb8T\xf1\xb8\xab\xd1\xec@\x92\xc2\xe8\x82\x8e)\x92\x84\xf6\x10^h\x9a*\x0f]\x9d\xa7Z\xf8\xc1\x9cW\n\xa5\xbd\'f\x13\xc8\x8d\xc8\x9d|\x86\x99+\xfa\xef\x7f\xe9\xb2pP\xb88\xec\x84\x18\xa3\xa5^*\xc5.\x1b\t\xd4\x00&YY*\xa0\ri\xc5j\x86Jd\xd1dq,\x80\xef\x9eaz\xde\x8f\xad\xf8\xd9\x8a\x03\x87\x1dS\x88\xa8z;\xd2\xf9\x84\xd9\xc8M\t\xde\xf5m\x11z\xe9\x9a\x14\x17\x93\xb1\x97\xa0\x8fX\xf4\xcft\x9dQ\x8cf\xff\xa1\x9dFQ.\xe3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0xffffff7b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 00:13:02 executing program 1: syz_usb_connect(0x4, 0x26a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) [ 517.503106][T11430] overlayfs: filesystem on './bus' not supported as upperdir 00:13:02 executing program 2: sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0xffffffff80000001, 0xad13) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0x1}, 0x7) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="300028995f1f0b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000070001006671000004000500"], 0x30}}, 0x0) [ 517.951304][ T8720] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 518.267957][ T8720] usb 1-1: device descriptor read/64, error 18 00:13:03 executing program 1: r0 = syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f0000000340)=[{&(0x7f0000000080)="5eb008e42c51c4493c64a1c6bcfd39a6fbffb9", 0x13, 0xf8f}, {&(0x7f00000000c0)="73a825807f465962b61ab279fb62300362ccb24209a766a7087687e5d13b54a5885abd1edd32ab936bc147098b3572ad65840fb9484e834bb4b6d1c97741a53b6093696056043eb775281faf1f402bfedaaf1d28f448c58829c1b470b5fa256a0a6f371740dc85ebee948d47d11c667075fb92e94614edced69406de9eabb8e22454bdad3105365088d85f35a490d3c4323d2aed5e3e080b90fd3161d58cd4663ff606fbbcd244fbc3a3fd816a6b2e7ae3ee6706c8ad2ad3de8224", 0xbb, 0x2}, {&(0x7f0000000180)="c74fbe24879cf52f780d9c47a867b797bb9839593dca8ae38bddcd03b82a44432ce242e10add03dfc092295b235c03b69fd11578bfa2c0c1cc0aab252965512a12d575411c885c70bcc5d16577", 0x4d, 0x4}, {&(0x7f0000000200)="421f641f75c0e1fd21c18e71e0c5865273f5853b60e48cb77ddcf3813d5b926701406f4c50b54a348d3bcf5ede1c5c5dabfe", 0x32, 0x3}, {&(0x7f0000000240)="9c5966bdd7ac68c7", 0x8, 0x6}, {&(0x7f0000000280)="d8654aa53e11f0fca66c64246c0b763f983139e5d397499501101477ba51ab84617fc383e1bdfeb8ba5126370d1a65ffbad0588a2d1071f0ca4e48fb85741a287dd42a5a14787b193ad2002aacaa67a60f2a07f73417cd9b1db90f9bd61e91a68bfa4b09e1f21e0de55db6399a08e69121008f04e5f092ab31b6675714a290b81e6419d1d98653f2a8389e102eef9b451343", 0x92, 0x80}], 0x108801, &(0x7f00000007c0)=ANY=[@ANYBLOB="556d63736b3deecb94dfe0000000ad0008000000000000003030303036084697643d", @ANYRESHEX=0xee00, @ANYBLOB=',nodiscard,nodiscard,discard=0x0000000000000000,integrity,errors=remount-ro,d000000000003,discard=0x0000000000000006,nodiscard,euid<\x00'/145, @ANYRESDEC=0xee00, @ANYBLOB=',smackfsfloor=*$,smackfsfloor=^}),dont_hash,seclabel,smackfstransmute=[#*,permit_directio,\x00']) r1 = socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000003c0)={@mcast2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0xe, 0x2, 0x7f, 0x4, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x8000, 0x0, 0x8}}) sendmsg$can_j1939(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x1d, r2, 0x1, {0x1, 0x0, 0x2}, 0xfd}, 0x18, &(0x7f0000000740)={&(0x7f0000000640)="80332ad8d86d001a56eba197f7d119fa84a01d8e756c03f9df5f52645c173219e7786b8627aff9e4dd2eff7a9326c2b2b82d58fa5021c90ae236b97178356a2f59fb1b247f252de181fcf636668324e8e5723c095516d12a61a24cfe43992625ac910ee4171febad4de82224a5ca21e22c3ad5fcf5cb96c4a56316607a9ba4363ec4df7660313eae7e10c2526e73b9849e39d16c26d78e15b8c718968e17d6e3078f4405a082e9dfa98013070eb0c3823e1592f631e36c8662e77ac82a089b9bb817d8e3b311223cefc23a01e00d04ea87f0f84c7a5aeaaab338429b0a9aed8a5eed1fb48553a542c8df017ba39cbcca7e1c", 0xf2}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) openat(r0, &(0x7f0000000500)='./file0\x00', 0x0, 0x130) [ 518.670320][ T8720] usb 1-1: device descriptor read/64, error 18 00:13:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000100005070000c1ca000000000000000013b56090df9cbddb2304758b5f305b6f5f07ba86", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0xfd}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}]}}}]}, 0x44}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r3 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @local}}, 0x6, 0x8, 0x4, 0x3ff, 0x81, 0x100, 0x70}, &(0x7f0000000400)=0x9c) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) getpeername(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000002c0)=0x80) r5 = openat$full(0xffffff9c, &(0x7f0000001c80)='/dev/full\x00', 0x100, 0x0) getpeername$packet(r3, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001d00)=0x14) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000001d40)={r6, 0x1, 0x6, @dev={[], 0x31}}, 0x10) lseek(r3, 0xfffffffffffffffe, 0x4) r7 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x420002, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000180)="0f005cb30c0f7859ba66b831010f00d0b805000000b910cee5860f01c166b8f3000f00d0660fc773009a2600000002010fae24ea0f20e035200000000f22e00f01d1", 0x42}], 0x1, 0x3, &(0x7f0000000200), 0x0) [ 518.947726][ T8720] usb 1-1: new high-speed USB device number 16 using dummy_hcd 00:13:03 executing program 3: unshare(0x24020400) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r0, &(0x7f0000000040)="e43c69271cb1", 0x6) ioctl$FICLONE(r0, 0x40049409, r2) r3 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x800) fcntl$dupfd(r1, 0x0, r3) [ 519.183185][T11458] __nla_validate_parse: 5 callbacks suppressed [ 519.183222][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.227758][ T8720] usb 1-1: device descriptor read/64, error 18 [ 519.254232][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.263995][T11459] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 00:13:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x73ec7}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x10001}}) r5 = socket(0x10, 0x803, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000380)=""/247, 0xf7}, &(0x7f0000000080), 0x8}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000000000000000a001a001aa90000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8, 0x20}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 519.414229][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.424107][T11458] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.446416][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.456273][T11459] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.638118][ T8720] usb 1-1: device descriptor read/64, error 18 00:13:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c, 0x16c, 0x16c, 0x16c, 0x16c, 0x7fffffe, 0x0, {[{{@ip={@multicast1=0xe0006500, @remote, 0x0, 0x0, 'veth1_to_hsr\x00', 'macsec0\x00', {}, {}, 0x32}, 0x0, 0x9c, 0xbc, 0x0, {0x0, 0x2a02}, [@common=@inet=@esp={{0x2c, 'esp\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x25c) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r1, 0xfffffffffffffffe, 0x4) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000280)={{0x0, 0x0, 0x80}}) [ 519.759199][ T8720] usb usb1-port1: attempt power cycle 00:13:04 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x2912, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000140)={0xb, @capture={0x1000, 0x0, {0x1c0, 0x6}, 0xe4, 0x5b6d}}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0xc0221, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x1, 0x1}, 0x4a21, 0xfff, 0x800, 0x6, 0xcdea, 0x6, 0xfff7}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$sock_SIOCGSKNS(r0, 0x83c0550b, 0x0) [ 519.913275][T11469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11469 comm=syz-executor.1 [ 520.090005][T11481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11481 comm=syz-executor.1 00:13:05 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x140}, 0x18) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x0) r1 = signalfd(r0, &(0x7f0000000140)={[0x7fffffff, 0x7]}, 0x8) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x1000, 0x4, 0x80000001, 0xfc5, 0x6, 0x0, 0x9}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 00:13:05 executing program 1: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt(r1, 0x20e, 0x2, &(0x7f0000000440)="4bc1fea90a294c12404e2b5f74558100b11ee4358ff6834df40e0cb4e4b50f61c49c7a13bac035b5e65e07288ffb954f6565fe20d1255ee0985f09b8b06026e295458eefa4b880db46ec6a6fa6a3477a52f0c50ba290e9474edb5e10598d0601d6472ec748df92215b604143a007dcef06d165495198b9db36d4933ce94d348adeccda45889bf3545f0d31fe9beebd7a24023037889085d0ba6499d1c031589dfafd59be39390f90624297f4dafea47cc068e839b93fdaaaaf2a325dc484088fa9bb08ecf3ae174bd3280fec6005805feb2259e5160292c9819b443baf427331e659cd09300557c3fb050de87a752128e9a3a428527d", 0xf6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="250c0001006d61637674617000040002800800", @ANYRES32=r2, @ANYRES64, @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) [ 520.487562][ T8720] usb 1-1: new high-speed USB device number 17 using dummy_hcd 00:13:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x80a, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="851e2100000000005cb4bafd24378bb2d44df35b00"/32, @ANYRES32=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8980}, 0x4000) [ 520.587672][ T9039] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 520.629615][ T8720] usb 1-1: device descriptor read/8, error -71 [ 520.827370][ T9039] usb 4-1: Using ep0 maxpacket: 16 [ 520.846015][ T8720] usb 1-1: device descriptor read/8, error -71 [ 520.948890][ T9039] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:13:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) sched_setscheduler(r0, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000002}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r2, &(0x7f0000000740)=""/384, 0x180) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000b2fe3ee86700", @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400018004000500000000000600010000000000"], 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70a6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x408c}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048054}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="b2d7cf22e3ad7927aeadcff226b48ed1aa76122c2a9118e2183bc8f5c949ab5dace502eed46fa9223f4632363e0c7e1852d6ca9238638f7331100d57d45ad881c9c87b20cfcfe9ba9608a619940dff2ac3119ad08670fccfd45e057b29c70f5823fa767e077c65c1e8ffbca97f0617afc44b36d06b5bbe88ec2ae64c5fb5cd6568a067c72676296bcbe495b26e3ed1ed724493964e2ca10fc89d682781fe36f386d49ecaf65571a6461d4c317246747265b6edc0335bb8b44b69c5debe5cb89e6b840c3ffc77b6880bb58baccecd4bf76161406706e50b22c1488db235ffbd8b117e456a2db916d3585952b98d95e141", 0xf0}, {&(0x7f0000000040)}, {&(0x7f0000000340)="c49ebe6a958260369f57b03c0f7b751592f53baf9290843e626f0013d7d8fa25df08209350a59f7b283320388d11f25deb772cbf53f7ef1022d68e7ca418d9ab8a6649703007cd447330c309c7bf799046624bda1d4b82a0267ff65ca01eaa6e725184071e2450aae521f6cabb94530fd8c44f6960da0c546883dad8d12629b14488714c38482a6a25f7eecc6511e5c608cec46b5444a5284390e37621e1b9618440d1778cf5a71f8fb7b74530019b38af338c01a03331cacc769018429a9277198ae42ef8bac06246c3768f3ee2e336d66d43aba17b90b62041cc27156303306e4e47ca1569e80c9198e8", 0xeb}, {&(0x7f0000000180)="42bad5bc40ae91d17847775f4871d1323f89446b463fde4f73d95dd87a0e11e021d0c441ade107816a80451607cbb37e29506123b7b89e2c14a65715773def42f8dd8f4952cd1c96c98e637c302134c204f25c449c01e7c6eb994628c75bd9844940815b9c832d6bc8ca8ad0d6804d4c26a62d3730616ff537", 0x79}, {&(0x7f0000000440)="56c57e83cc239621fe53f945d8df7b909709f6e6256bf2f000185f2a24b7b11568ddc6a695d2d383cfa3827655a98378ceb95e9e75743a39ded2c3289f7da90c595f96f0b1a31c1b4977912003a74a52c95115b77197088492927dc9fb4122f07106964a16f739018aa1d878c0d7120b0fad60aa3da1bfc29829f800305d1b89e234ef3bd92d9c3932dd7d83a8bafa04dd7b582ea6e4c99e59a9d512cfae3bfe34e63cc888b1308a8892705096e74cc38e68ce443bd98510ab73bfc6de231fb19a140ab0f6e0d86cd842646df95f9db877b8a5f628", 0xd5}], 0x5, 0x0, 0x0, 0x4010}, 0x20040800) r4 = getpgrp(0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0xfffffffffffffffe) fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000000c0)=0x5000) kcmp(r4, r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace(0x4207, r6) 00:13:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x2, 0xfffffff9, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @rand_addr=' \x01\x00', 0x1, 0x1, 0x4}}) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x1b, r2, 0x1, 0x0, 0x6, @remote}, 0x14) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1000, &(0x7f0000000300)=""/234) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x8c, 0x10, 0x401, 0x1, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x28}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xff}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x8c}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r5, &(0x7f0000000900)={0x2c, 0x0, r7}, 0x10) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x3, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) [ 521.129412][ T9039] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 521.138802][ T9039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.146944][ T9039] usb 4-1: Product: syz [ 521.151741][ T9039] usb 4-1: Manufacturer: syz [ 521.156487][ T9039] usb 4-1: SerialNumber: syz 00:13:06 executing program 4: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x40, 0x1000}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x20}}, 0x4000004) [ 521.320440][ T9039] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 521.328137][ T9039] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 521.336178][ T9039] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 521.343133][ T9039] cdc_acm: probe of 4-1:1.0 failed with error -22 00:13:06 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}}}]}}]}}, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x64) r0 = openat$autofs(0xffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0xc3, "6a94a2f2e9515a91e123eccaaea4f4c71779cb83be038decff2cef45e959b210ef08944bfff146e481b420a286f380fff70e6633cbe0f31f6b5cb6dc9999017eceb339ffcdc387c167e1b6c3694e3ce3ec2beee61c41dffc160b2e861ff5b441329d5229adb3a85ec0f865e2d3fa94c5089c02d9a798f1e40c0eec39dbd1cf2f6ccc01c4ee5c1dd69722aaad3ac1212bac6f47e8106211eaf4a472342f91fa3b76aabb468b1af53a55c53ff32a2900e629f8997fb7682a0c40b33f72132c95a2cd079c"}, &(0x7f0000000400)=0xe7) [ 522.024251][T11507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:13:07 executing program 2: socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x2f, 0x0, 0x20, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, 0x80, 0x0, 0x0, 0x10}}) [ 522.205685][T11507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.213708][T11507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.287816][T11507] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 522.295493][T11507] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 522.347333][ T9039] usb 4-1: USB disconnect, device number 8 [ 522.481616][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 522.499354][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.507788][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.582900][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): gtp0: link becomes ready [ 522.590631][T11517] IPv6: ADDRCONF(NETDEV_CHANGE): gtp1: link becomes ready [ 522.757994][ T9039] usb 4-1: new high-speed USB device number 9 using dummy_hcd 00:13:07 executing program 1: setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_disconnect(0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) pwrite64(r0, &(0x7f0000000000)='5', 0x1, 0x0) 00:13:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x4840c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000080)={0x1b50, {{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x4}}, {{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x104) 00:13:07 executing program 2: socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x2f, 0x0, 0x20, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, 0x80, 0x0, 0x0, 0x10}}) [ 522.888910][ T12] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 522.998201][ T9039] usb 4-1: Using ep0 maxpacket: 16 [ 523.117782][ T9039] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 523.142279][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 523.269772][ T12] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 00:13:08 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000740)="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", 0x1000, 0x6c}, {&(0x7f0000000180)="e48e4bc04cabf2a9549fac27b160bca3cf666304fa94a361a0a5c50fc6fa5dd61e50cb5706273488dda4fa2ebe8511d4b8d02a4efbff69e51f39349dd97016b7ab601a3eca15b947aaab2fce28293d15b707717b5b7847a78907e42ef80e1abdd2c109455ce17a299270b1e913aba37ebd597cd3638a1d17d2e18944a4d05b67ba49b0c642da75ce032193a65facf6f3dda2d95020688bdbd3470ff42264adb826ffdc5b28493db7e1ca8210d79933e5ccc4e8b61e3eaafb2bc0e2e75a0504918b7f106384158c229f4e98a598c31e66120ef170cc5880bfa296cb41fd2d85a48039", 0xe2, 0x100}], 0x1c02210, 0x0) signalfd4(r1, &(0x7f0000000300)={[0xffff, 0x8]}, 0x8, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000340)=0x58b, &(0x7f0000000380)=0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/256, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[@ANYBLOB="f4ffffffffffffff"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) r4 = dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) 00:13:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x4d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000000)=""/54, 0x36) splice(r0, 0x0, r3, 0x0, 0x2, 0x0) write$nbd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6744669800800000ddffffff1b87000035844f1f565950ad854e43882704da4d7bffbdbe227b685987efe0b4c4f13dabdb24a99686ebd4b8b94d3afb544024423ebb31a3ee2387acbaaa99475e99e41034fb2b69c5e0b6801990beabe5583ebf80b2c1b4534284180a82fb172f56582f2e5a75cfb37eb4496e"], 0x10) [ 523.437746][ T12] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.447374][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.455523][ T12] usb 5-1: Product: syz [ 523.460063][ T12] usb 5-1: Manufacturer: syz [ 523.464813][ T12] usb 5-1: SerialNumber: syz [ 523.507570][ T9039] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 523.517150][ T9039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.525317][ T9039] usb 4-1: Product: syz [ 523.607491][ T9039] usb 4-1: can't set config #1, error -71 00:13:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000064b57f08e60f009836b30000fe010902120001010000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000fbb930102404009d490b000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={[], 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 523.655206][ T9039] usb 4-1: USB disconnect, device number 9 [ 523.690996][ T12] usb 5-1: bad CDC descriptors [ 523.924566][ T9039] usb 5-1: USB disconnect, device number 7 00:13:09 executing program 1: syz_usb_connect$uac1(0x0, 0x7f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109026d0003010000000904000000010100000a24010000000102"], 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x3) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0xffffffff) 00:13:09 executing program 5: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40080, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1ac, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6d83}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x556a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x16}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x225}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x92b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xca3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x111ec054}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8ec}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xab, 0x52, 0xfa, 0x7, 0x0, 0x5d54, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000002c0), 0xe}, 0x40002, 0x8, 0x10001, 0x8, 0xffff, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000380)=0x2c0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xfffffffa) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000004c0)={0x0, @aes128}) r2 = fanotify_init(0x1, 0x40000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={0x0, "f9f4c5bcf941f427734e6c73d8bd0356"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001500)={{r2}, {@val={r3}, @max='max'}}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001540)="b9a50b2b88f783ea19d9e0d47cc0fdf8bb0cc29ee5f9f2a590540922b212506c3393c65598d6e8cfdbf5ed6e663904860eb64a66b2ac57c784e93aea13525d3b2893ce647bddaefc2a5fee56fe71232ab157b00f99f01abb54340728684306fdd736afae918c694736bd910641a0f416f1bf5fdf1017d4270749adad885aa54e70f3554bef43744701e7f2700e8ee434f313e646460b32afe62798e30948b769379ddb0ab1f24a98f51d839a", 0xac) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001600)='/dev/dlm-monitor\x00', 0x20200, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000001640)={0x8, 0x8, 0x967e}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xffffff81}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0xc800) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000017c0)) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001800)='/dev/dlm-monitor\x00', 0x8001, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) getuid() 00:13:09 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) [ 524.396428][ T12] usb 3-1: new high-speed USB device number 8 using dummy_hcd 00:13:09 executing program 3: listen(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000300)={0x6, 'virt_wifi0\x00'}) [ 524.637501][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 524.643075][ T9039] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 524.726752][ T3226] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 524.837662][ T12] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=b3.36 [ 524.847294][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=254 [ 524.855781][ T12] usb 3-1: SerialNumber: syz [ 524.908007][ T9039] usb 2-1: Using ep0 maxpacket: 8 [ 524.997038][ T3226] usb 5-1: Using ep0 maxpacket: 16 [ 525.028028][ T9039] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.038528][ T9039] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.128005][ T3226] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 525.208687][T11580] udc-core: couldn't find an available UDC or it's busy [ 525.216627][T11580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 525.218144][ T9039] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.234186][ T9039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.243273][ T9039] usb 2-1: Product: syz [ 525.247901][ T9039] usb 2-1: Manufacturer: syz [ 525.253561][ T9039] usb 2-1: SerialNumber: syz [ 525.317579][ T3226] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.329095][ T3226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.337439][ T3226] usb 5-1: Product: syz [ 525.341747][ T3226] usb 5-1: Manufacturer: syz [ 525.346716][ T3226] usb 5-1: SerialNumber: syz [ 525.439854][ T3226] usb 5-1: bad CDC descriptors [ 525.490791][ T12] CoreChips: probe of 3-1:1.0 failed with error -32 00:13:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x3, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) 00:13:10 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 00:13:10 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) close(r0) [ 525.622995][ T9539] usb 5-1: USB disconnect, device number 8 [ 525.753943][ T9039] usb 2-1: USB disconnect, device number 31 00:13:10 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) 00:13:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r2, 0x0, 0x100000001) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) [ 526.045116][T11645] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.112952][T11645] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074c1300000000f9ff00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001dc0)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x44}}, 0x0) 00:13:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x13648, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 526.402660][ T28] audit: type=1804 audit(1599437591.331:22): pid=11651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/69/cgroup.controllers" dev="sda1" ino=15998 res=1 [ 526.427242][ T9039] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 526.463187][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.498412][ T28] audit: type=1804 audit(1599437591.371:23): pid=11651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/69/cgroup.controllers" dev="sda1" ino=15998 res=1 [ 526.525584][ T28] audit: type=1804 audit(1599437591.381:24): pid=11651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/69/memory.events" dev="sda1" ino=15992 res=1 [ 526.551435][ T28] audit: type=1800 audit(1599437591.381:25): pid=11651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15992 res=0 [ 526.573029][ T28] audit: type=1804 audit(1599437591.411:26): pid=11651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/69/memory.events" dev="sda1" ino=15992 res=1 [ 526.612714][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.737489][ T9039] usb 2-1: Using ep0 maxpacket: 8 [ 526.835610][T11618] IPVS: ftp: loaded support on port[0] = 21 [ 526.869732][ T9039] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.880808][ T9039] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.057580][ T9039] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.069213][ T9039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.077841][ T9039] usb 2-1: Product: syz [ 527.082158][ T9039] usb 2-1: Manufacturer: syz [ 527.087082][ T9039] usb 2-1: SerialNumber: syz 00:13:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffffffe300", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) [ 527.191284][ T12] usb 3-1: USB disconnect, device number 8 00:13:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @rand_addr, 0x0, 0x0, 'none\x00'}, 0x2c) [ 527.456358][T11698] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 527.739900][ T9039] usb 2-1: USB disconnect, device number 32 [ 527.835646][T11737] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 527.928708][T11704] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.941758][T11704] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 527.952721][T11704] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 527.968704][T11704] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 528.319505][T11618] chnl_net:caif_netlink_parms(): no params data found [ 528.603989][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.611443][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.620943][T11618] device bridge_slave_0 entered promiscuous mode [ 528.688129][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.695339][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.705502][T11618] device bridge_slave_1 entered promiscuous mode [ 528.772671][T11618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.789184][ T8720] Bluetooth: hci5: command 0x0409 tx timeout [ 528.804853][T11618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.870081][T11618] team0: Port device team_slave_0 added [ 528.893745][T11618] team0: Port device team_slave_1 added [ 528.953858][T11618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.962041][T11618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.989221][T11618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.018943][T11618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.027376][T11618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.053523][T11618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.132277][T11618] device hsr_slave_0 entered promiscuous mode [ 529.142307][T11618] device hsr_slave_1 entered promiscuous mode [ 529.159392][T11618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.167183][T11618] Cannot create hsr debugfs directory [ 529.524736][T11618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 529.545048][T11618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 529.570340][T11618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 529.618668][T11618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 529.953473][T11618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.992275][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.002059][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.025009][T11618] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.066267][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.077417][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.086825][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.094159][ T9539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.116254][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.125542][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.136564][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.146083][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.153308][ T8720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.183139][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.223781][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.291455][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.302532][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 530.313330][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 530.324305][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 530.357469][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 530.393148][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 530.403249][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.440178][T11618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.457949][T11618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 530.467724][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 530.477776][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.559070][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 530.567079][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.616449][T11618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.869407][ T9039] Bluetooth: hci5: command 0x041b tx timeout [ 530.910417][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 530.921550][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.011212][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 531.021457][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.123231][T11618] device veth0_vlan entered promiscuous mode [ 531.173957][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.183566][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.227162][T11618] device veth1_vlan entered promiscuous mode [ 531.348703][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.360845][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.371177][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 531.381416][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.418270][T11618] device veth0_macvtap entered promiscuous mode [ 531.457664][T11618] device veth1_macvtap entered promiscuous mode [ 531.513667][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.525708][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.537274][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.548631][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.559056][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.570695][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.580787][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.591650][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.601732][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.612398][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.627235][T11618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.638304][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 531.649740][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 531.660479][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 531.671798][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.832172][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.843208][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.853421][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.864076][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.876338][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.888309][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.899497][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.911920][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.922530][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.933283][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.949012][T11618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.964276][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.974711][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:13:17 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x38}}, 0x0) 00:13:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03", 0x2b}, {&(0x7f0000000000)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c615204", 0x31}], 0x3}}], 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9031a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 00:13:17 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2e00000010008108040f80ecdb4cb92e1e480e000d000000e8bd6efb250309000e000100240248ff052005001201325e8726963c87aa487b", 0x38}], 0x1}, 0x4040080) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x5, &(0x7f0000000080), 0x20a15ab6) r2 = socket(0x11, 0x800000003, 0x0) sendmmsg(r2, &(0x7f0000008000)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "c9d411450f8db03d72ee80a11bf00d71170b8f636c1f0dd618d3b91d434cc01b2fae087cbc9b58315d54f2798e8c2ad22c349372804a72e0c2cebe366ee6b9"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="b5acfe2efdd2480955cb584f75bf", 0xe}], 0x1}}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="1d201a4d6250f48496947449de31ae41dee2ef79f60000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000000301ffff"], 0x14}}, 0x4010050) recvmmsg(r4, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) recvfrom$llc(r5, &(0x7f0000000300)=""/243, 0xf3, 0x40010000, &(0x7f0000000400)={0x1a, 0x338, 0x1, 0x3, 0x7f, 0x3f, @local}, 0x10) 00:13:17 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev, 'veth1_to_bond\x00'}}, 0xfffffffffffffd94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000cc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendto$unix(r3, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0}}, 0x10) 00:13:17 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 00:13:17 executing program 2: sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) [ 532.947029][ T12] Bluetooth: hci5: command 0x040f tx timeout 00:13:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8d}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 00:13:18 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a0001"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000714"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x14) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8c0, 0x0, 0x4b6ae4f95a5de35b) 00:13:18 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 00:13:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000740)={@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0}, 0x0}, 0xa0) [ 533.618192][T11996] BPF:[1] INT (anon) [ 533.622458][T11996] BPF:size=5 bits_offset=0 nr_bits=141 encoding=(none) [ 533.629601][T11996] BPF: [ 533.632469][T11996] BPF:nr_bits exceeds 128 [ 533.637015][T11996] BPF: [ 533.637015][T11996] [ 533.658775][T11996] BPF:[1] INT (anon) [ 533.663040][T11996] BPF:size=5 bits_offset=0 nr_bits=141 encoding=(none) [ 533.670823][T11996] BPF: [ 533.673664][T11996] BPF:nr_bits exceeds 128 [ 533.678200][T11996] BPF: [ 533.678200][T11996] [ 533.690222][ T8720] Bluetooth: hci0: command 0x0406 tx timeout [ 533.727144][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.735576][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.744419][T11989] device bridge0 entered promiscuous mode 00:13:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(r0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) [ 534.004477][T12006] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:19 executing program 5: unshare(0x2a000400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 00:13:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x60}}, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl(r1, 0x8911, &(0x7f0000000480)="93823624346cbd71d417b9d7b77039d6023c59d2eacf49b8235a97ab989c0500ac52d0672bf087bfa1b5ee61cb50dc7a74c7c05a374dc3b45f70ce7f5bb5b3a4e97b6fbf24562b") setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "d3b528029ac02906", "710bbee952e1d4e25788f3279c58b388998b9463b0e7ce252eb249e901b5055c", "fedff791", "5cfbc400a82a35e3"}, 0x38) r2 = accept4(r1, &(0x7f00000022c0)=@xdp, &(0x7f0000002340)=0x245, 0x800) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000003c0)={0x0, 'vxcan1\x00'}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0xa, 0x5, 0x0) close(r3) syz_extract_tcp_res(&(0x7f0000000180), 0x7, 0x1000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x9, 0x400, @loopback}}, 0xfffffffe, 0x21, 0x8, 0x0, 0x8}, &(0x7f0000000300)=0x98) r4 = socket(0x26, 0x80000, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x800) 00:13:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000b40)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 534.773670][ T28] audit: type=1400 audit(1599437599.702:27): avc: denied { ioctl } for pid=12014 comm="syz-executor.1" path="socket:[40732]" dev="sockfs" ino=40732 ioctlcmd=0x8911 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 00:13:20 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x10, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 00:13:20 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev, 'veth1_to_bond\x00'}}, 0xfffffffffffffd94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000cc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendto$unix(r3, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0}}, 0x10) [ 535.116176][ T12] Bluetooth: hci5: command 0x0419 tx timeout 00:13:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x200600) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @none}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0xec6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x10001}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[], 0xfffffdea) 00:13:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)) 00:13:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {0x22}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) 00:13:20 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005500), 0x11272d7, 0x10000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 00:13:20 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:13:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 00:13:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000100)) 00:13:21 executing program 0: bpf$PROG_LOAD(0x10, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) 00:13:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl(r0, 0xc020660b, &(0x7f0000000040)="31ccd1e9ec248efadda781e4cbb1cda5cc1318255ab0c05b0a661ba6") [ 536.649486][T12062] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 00:13:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @multicast2}], 0x1) [ 536.760571][T12067] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 00:13:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) socket$inet_udp(0x2, 0x2, 0x0) [ 537.186580][ T8718] Bluetooth: hci5: command 0x0405 tx timeout 00:13:22 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev, 'veth1_to_bond\x00'}}, 0xfffffffffffffd94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000cc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendto$unix(r3, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0}}, 0x10) 00:13:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"/640], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:13:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000b40)={'filter\x00', 0x4, 0x4, 0x3d0, 0xe8, 0x0, 0xe8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@multicast2, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x272, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth0_to_hsr\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x3, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @local}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) 00:13:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1536], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12102, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) 00:13:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) 00:13:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="72d08acc715ed0776428"], 0xfffffffffffffe12) close(r2) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x4, 0xffe0}, {0x6, 0xe}}}, 0x24}}, 0x80) r4 = socket$inet6(0xa, 0x6, 0x0) close(r4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r2, 0xa773d000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x23, &(0x7f0000000080)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x40}, 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 537.810355][T12095] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 537.840334][T12098] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.978400][T12101] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) mmap(&(0x7f0000005000/0x3000)=nil, 0x200000, 0x0, 0x12, r1, 0x0) 00:13:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5, 0x1}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r1}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r2}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 00:13:23 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose, @rose, @null]}, 0x10) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x2, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r2, &(0x7f00000020c0), &(0x7f0000002100)=0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x7ff}) 00:13:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x1000, 0x1, @loopback, 0xfffffee9}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1030) sendto$inet6(r1, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "011d00", '\x00', '\x00', "00f45000000b00"}, 0x28) 00:13:23 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfba1133f8fc07f7b, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x6, 0x0, 0x20203ffc}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32, @ANYBLOB="ddffffffffff"], 0x34}}, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@dev, @in6=@private0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) 00:13:23 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x6, &(0x7f0000001e00)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 00:13:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)="5b8cc42e5f0c492da621f707b81342eaa044bb44f90571d5a6ffffcbd83ee593cb7aa4e47a5ec4aee0a8af4921075463f798290c7b1089c91140ce66715dcf6eb3fa3e25", 0x44}, {&(0x7f00000004c0)="1f8a63ef02a9c63598347ce7436bcd67641e350a0a0ac77c925472", 0x1b}, {&(0x7f0000000140)="d9198b73296f515263877c12d92510933f45c4c40fbb3fc5657a2d426700ba50a177666d4ff45e380a8e16d53dcf27366b5476298f4623c1e82f2cae66fbdad48e46f1a7974c6c9a268ab462db9a17c6c3a06dedb7c8796a6a65330b9fc95fd9e3cae223bf6ca5167773a1857d17dafd5dd7789353853bea52270fee92cc5841d866c83508845aae452b469770ff2f1c4a4675b1b0509d27cb9f398008d0af6bce823ca5f413526d8ff4b5113c49cf9556ee05f105e58f788c0a469f1e811617c19adf4ba1dcff7b2b896facba32ebee72cdf4979222d6ca09bc3b0f9258a0d5fd9d7eb95ce3e64957", 0xe9}, {&(0x7f0000000680)="9588ade73c622bcbf05e9e708ab41f8279a8c780df448213f7f5f7c0d7cf229e85fa16e822681944f042465783657d0365529d1ec56d32aa412b50e1ddef8db04dd4906b61b12b939f4010da6f62228b29ac4cce11ac6cd03a42897e5e9c0bc141929a6bcb064bce04ce4499f1eaf4234468104d8df3342c6c78ab9f0c042c47408a32170c21da65a03c0e779a018d2ed2050f2ec354558840faab19ce5da0efe59bb11051bf5229dcad0955d2bf155dbc3f0cc6b368e752bf", 0xb9}, {&(0x7f0000000840)="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", 0x398}], 0x5}}], 0x2, 0x4000040) 00:13:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @empty}], 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$sock(r1, &(0x7f00000058c0)=[{{&(0x7f0000000100)=@can={0x1d, r3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="0af935946c0579389cec14ff2da7fe31f8a75077c8a543a07b65f4c3547f38180fb979d4", 0x24}, {&(0x7f0000000240)="5af6c9c4a9b27a003549645675a9c4889fb6d114c7a56613e61980e05b44c07ec4c3a450bb62948b655ca4399d3ed318cd48f50695b89b16291398b9c3fe6384e0f5a9775bee15db7c40a3ff746cb3fb8ccfcf2d156e7765feb8abd6a577c7688459312e9aa841f2da109b91fe6cc48ee6ecf910ed0cf996da7d6dba8a9e006e225b0413b723c4194a32e02a7dbb32caff4557bbebae85239e1a6be6ae56c9e7dd8a3493f230", 0xa6}], 0x2, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x78}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x1, 0x3}, 0x80, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000c40)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xae7}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}}, {{&(0x7f0000000d00)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)="c86bca75d0edd09734d08813bd3bd3b490e0d08f1b0630dd3a9a2ad3706a147542a5814c52980e3df07d9510afb3dac3f3127bb346e0fd6104e752d1259939888a520c5a37c0e6bbb167e0b69eba846824ffe090dff60863ea81a9ce19396ca2b45ba4afc4d15c4c77a0918c89ddbb50fb2d2312490103d38762de18", 0x7c}, {&(0x7f0000000e40)="93414ddce1ac5a920aa9eafd93584c796b040b6cfe0d4441d11bc57d90873ba771aa92ca8ac071212616aed7949f0abfda2ac6d7fe629b829f98e99c53b4e7b6d4582da5a253683850db21e71b3fc8d59d2f9997e93590b316", 0x59}, {&(0x7f0000000f00)="3e547482f91f24e4df70889ad41d62d9f80fcbed1984d4efda2045450697159f856031ccd78708211284d8e2e21a1fa1b520b696662cdd419263bb048e22a64a89309e2345b0e8840bd5881255b1401d2b882f794c074f5c617efe868bce9281f01a649b43d9322feb0448e682e54eceb3c73c37957a0e07b1bee556f0a5eb68e4f69144213e7344195181750b5fa434f9c310f12e1ecb8d448d24ba8cdf", 0x9e}, {0x0}], 0x4, &(0x7f0000001080)}}, {{&(0x7f00000010c0)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001140)="3a4f020fe5ddca35eb443aeea941e872861402791f6c6c6fd844040e99c2222540c87a13397394fe7f5957982be3d5f0b7142ebecb76271d5b1c5fab6a5f", 0x3e}, {&(0x7f00000011c0)}, {0x0}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="838a558534657d5ab998e009d33395f6201594fac81bbff4e10a22056ea38ebcc3a97fc23f2fba0ea57fec2930ea2ae84435ca1000f4b570afa6fd913ebe2574c48e7c12ce7205e290690e914e8bce17b37de6fd6594517a8e897f725bcb05dcbb745e7fa006b5f99e2a1fad0b95e628a27ef45c9086f53086c7e20c80c91b84ee3117df39cf677a93a8c66eb6001040a1b657942220890ee6e69befd6ac3da232e544f5", 0xa4}, {&(0x7f00000014c0)="daf1cc0392724ac8cd9d9bba61c51406e5c92e2f0794278583c7028b3d51937849ded6b4bdd2fa45d10f967342260c7504", 0x31}], 0x6, &(0x7f0000001580)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}], 0x90}}, {{&(0x7f0000001640)=@phonet={0x23, 0x0, 0x0, 0x3f}, 0x80, &(0x7f0000002700)=[{0x0}], 0x1, &(0x7f0000002740)=[@timestamping={{0x14, 0x1, 0x25, 0x7c49}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14}}], 0x90}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003c40)="39718c15ff391ed4a5803b136979758165bcb16e845e42f2c42641", 0x1b}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003d80)}, {&(0x7f0000003e80)="eda3f6b06134e26e592b28a8", 0xc}, {&(0x7f0000003f00)="a022dac03ccae87c70a22995be1160632386a7f9466f2b112904e0e3d6655a05b7b530b6a20d", 0x26}, {0x0}, {&(0x7f0000004040)}, {0x0}], 0xa, &(0x7f0000004200)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}}, {{&(0x7f0000004280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000005640)=[{&(0x7f0000004340)="b40501195971441c86958a25d23a335842f4ae1f732a90b997febf575f", 0x1d}, {&(0x7f0000004400)="a4d600c212e4e84c049199ef6f6dcca80cee8721ae1922df545599cc307a6bcfd3d091f8864dd0bd76db", 0x2a}, {&(0x7f0000004440)="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", 0xf9e}, {&(0x7f0000005440)="5cc9488d0f065cb79bdc32e218f9415c7bf4426dc0580ba738a722158b2ec91825c2daa1b731b7fc1f82c48934fe32bdc6730a7c519e8296c2d81edc36a6fae7730406ac93880c7ac0c6e53f72ebf719a7f625d54691a15dbe6ba96931cff24752bab6fc486ef74fbd1390989fec1d9805f160e8576e5d3eb23ebd3816810298e68821365ce692784bafe1e1712ab0e516eb3276ffd5c8f2ed29ab56fed9442cd9b6028d328f306c9f78632999ce76e79593d7951751ffb1235bd7894827e84a0e6c2ee63842d7759d899f4c32dd33694aa4aecfbc97c669339ffcc9", 0xdc}, {0x0}], 0x5, &(0x7f00000056c0)}}, {{&(0x7f0000005700)=@caif=@rfm={0x25, 0x541, "9dece948394c5abe1bdca32e9b0cd123"}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005780)="c22aace4342ff8181e887fcb7be8d7b27f39ba5fca04fb941a", 0x19}], 0x1}}], 0x8, 0x24000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000000b000500010067"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x1000000ef) [ 539.165483][T12129] IPVS: ftp: loaded support on port[0] = 21 00:13:24 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="c800000010001fff020000001ff08843e3ffff80", @ANYRES32=0x0, @ANYBLOB="00000000000000009c0012001000010069703665727370616e000000880002001400060000000000000002000000ffffe0000002140007000000000000000000000800ffac1e0101080003008e000000040012f80700aeb7a40000000400120008000800000000001400060000000000000000001d00ffff00000000140006000780000000000000000000000000000014000d00ff0200000000000000000000a4a2e6a00c000a00aaaaaaaaaa1c200014757c6d63b1e7b02332ec098e6ea2f71a8e51f2cc9faedd3852a8fa4180d745bb77f96f30c462f33ef7e6f278c8cf"], 0xc8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0xe303, 0x0) 00:13:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0xfffffe8c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0x8, 0x2, 0x2db, 0x400, 0x7, 0x2000, 0x2, {r1, @in6={{0xa, 0x4e22, 0x31af4605, @local, 0x2}}, 0x7, 0xeb6, 0x9, 0x1000, 0x9}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r4, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) 00:13:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x180) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r2}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 00:13:24 executing program 1: syz_emit_ethernet(0xaa, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr, {[@generic={0x0, 0x7, 'j!K\fO'}, @cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "3668c7"}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@local}, {@remote}, {@local}, {@remote}]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {}]}, @ssrr={0x89, 0x17, 0x0, [@multicast2, @multicast2, @multicast1, @multicast1, @dev]}]}}}}}}}, 0x0) [ 539.821779][T12141] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 539.831511][T12141] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 539.841323][T12141] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 539.849850][T12141] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 540.212314][ T28] audit: type=1804 audit(1599437605.143:28): pid=12154 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/8/cgroup.controllers" dev="sda1" ino=16057 res=1 00:13:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2, 0x2}]}, @enum={0x0, 0x0, 0x0, 0x5}]}}, &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x8}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) r2 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x89a0, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x5}) recvmmsg(r2, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/229, 0xe5}], 0x1, &(0x7f0000000300)=""/243, 0xf3}, 0x43}, {{&(0x7f0000000400)=@ipx, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)=""/189, 0xbd}], 0x1, &(0x7f0000000180)=""/40, 0x28}, 0x1ff}, {{&(0x7f0000000540)=@caif, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/160, 0xa0}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/132, 0x84}], 0x3, &(0x7f00000007c0)=""/255, 0xff}, 0x5a}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/65, 0x41}, {&(0x7f00000009c0)=""/1, 0x1}, {&(0x7f0000000a00)=""/45, 0x2d}, {&(0x7f0000000a40)=""/111, 0x6f}, {&(0x7f0000000ac0)=""/147, 0x93}], 0x5, &(0x7f0000000c00)=""/128, 0x80}, 0x7f}, {{&(0x7f0000000c80)=@x25, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d00)=""/169, 0xa9}, {&(0x7f0000000dc0)=""/98, 0x62}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/147, 0x93}, {&(0x7f0000000f40)=""/147, 0x93}, {&(0x7f0000001000)=""/107, 0x6b}, {&(0x7f0000001080)=""/99, 0x63}, {&(0x7f0000001100)=""/156, 0x9c}, {&(0x7f00000011c0)=""/65, 0x41}, {&(0x7f0000001240)=""/118, 0x76}], 0xa}, 0x100}, {{&(0x7f0000001380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000001400)=""/93, 0x5d}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/99, 0x63}, {&(0x7f0000004580)=""/22, 0x16}], 0x7}, 0x6}, {{&(0x7f0000004640)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000046c0)=""/127, 0x7f}, {&(0x7f0000004740)=""/93, 0x5d}], 0x2}, 0xfff}, {{&(0x7f0000004800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004880)=""/36, 0x24}, {&(0x7f00000048c0)=""/61, 0x3d}], 0x2, &(0x7f0000004940)=""/133, 0x85}, 0x49e}], 0x8, 0x140, &(0x7f0000004c00)={0x0, 0x1c9c380}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01"], 0x3}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000004d00)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="c2341f21ab48"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004000) [ 540.641352][T12166] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 540.650413][T12166] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 540.658759][T12166] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 540.667111][T12166] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 00:13:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0xfffe) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 00:13:25 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) close(r0) 00:13:26 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x9}]}}, &(0x7f0000000340)=""/211, 0x26, 0xd3, 0x1}, 0x20) [ 541.031248][T12192] BPF: (anon) type_id=2 bits_offset=2 [ 541.036938][T12192] BPF: [ 541.039757][T12192] BPF:Member is not byte aligned [ 541.044933][T12192] BPF: [ 541.044933][T12192] [ 541.789062][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 541.806135][T12192] BPF: (anon) type_id=2 bits_offset=2 [ 541.812816][T12192] BPF: [ 541.815862][T12192] BPF:Member is not byte aligned [ 541.821808][T12192] BPF: [ 541.821808][T12192] [ 542.264926][T12129] IPVS: ftp: loaded support on port[0] = 21 [ 542.462011][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.487578][ T521] tipc: TX() has been purged, node left! 00:13:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) socket$netlink(0x10, 0x3, 0x0) 00:13:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8, 0x1f, r2}]}, 0xc0}}, 0x0) 00:13:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0xffffffffffffff68, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 00:13:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={'vcan0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4480) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x1c}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 00:13:28 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0xfffd, 0x0, 'lblcr\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) 00:13:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 543.283379][T12259] IPVS: ftp: loaded support on port[0] = 21 00:13:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:13:28 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000160a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000008) 00:13:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x1d}}) [ 543.905757][ T9039] Bluetooth: hci1: command 0x0406 tx timeout [ 544.222598][ T28] audit: type=1804 audit(1599437609.153:29): pid=12291 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/67/cgroup.controllers" dev="sda1" ino=16078 res=1 00:13:29 executing program 2: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={0x0, 0x2c}}, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 00:13:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f000001c740)=""/102368, 0x210000, 0x800, 0x0, 0x3}, 0x20) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x58) socket$inet6(0xa, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x290) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) sendto$inet6(r1, &(0x7f0000001600)="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", 0x1056, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000008c0)=0x10) 00:13:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="743ac287f431859191ce374c8de368926c043e29206aa804a4d96dda9977589dfdda354edcc363bf94ca47de060b24c22852cdce0ea4cdf816b3d836b99279e53d57d4b773db3397b85961191d2c344cf34a0e76c5dfae74ed637e82bd72e6ef9494e3d0135ee9dfe503690f1655c34a", @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x41100, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x210000}, 0x20) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendto$inet6(r1, &(0x7f0000001600)="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", 0x106a, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x3d) [ 545.077699][ T28] audit: type=1804 audit(1599437610.013:30): pid=12301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/68/memory.events" dev="sda1" ino=16082 res=1 [ 545.103816][ T28] audit: type=1800 audit(1599437610.013:31): pid=12301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16082 res=0 [ 545.126537][ T28] audit: type=1804 audit(1599437610.013:32): pid=12301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/68/memory.events" dev="sda1" ino=16082 res=1 [ 545.153439][ T28] audit: type=1804 audit(1599437610.013:33): pid=12301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/68/memory.events" dev="sda1" ino=16082 res=1 00:13:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0xfffffffffffffda0, 0x1, @lb_hash_stats={{{0x82, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0xffffffffffffff6c}}}, {0x0, 0x1, @name={{0x0, 0x1, 'mode\x00'}, {}, {0x0, 0x4, 'random\x00'}}}, {0x0, 0x1, @notify_peers_interval={{0x0, 0x1, 'notify_peers_interval\x00'}}}]}}]}, 0x60}}, 0x0) 00:13:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmmsg(0xffffffffffffffff, &(0x7f00000067c0)=[{{&(0x7f0000000300)=@isdn={0x22, 0x81, 0xff, 0x81, 0x9}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x14e0}}, {{&(0x7f0000001900)=@phonet={0x23, 0x25, 0x9, 0xf9}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001980)="2c6febc55fa6673e76a1da8debc6940f2c6291deb6fc6cc2db69032c5e5b0138986d4f401d2e1dccb3a0358a4a04502ea91fca3c89e0a69dc212430c07e8ec4a924b61303e0b2e39019dd567f829dfd97253a4b8d35c8af42ca71e11b17a2bc96dd3380fae3e858b709bd60473211ef53f", 0x71}, {0x0}], 0x2, &(0x7f0000001b80)=[{0x68, 0x84, 0x100, "ae1011892416a488187af933733c35fb3210976c89417f8ecd92820b4e8505909f8e781aa6ec76cf43177e0d27e1e23e123827a83b48065061866f3609daa83e9de43786bdf0a2e611545c4768067e3d23c1cb22586364"}, {0x10, 0x10d}, {0xf10, 0x84, 0x0, "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"}, {0x10}, {0x600, 0x10e, 0x0, "2eab98673f973bb4712beff09462df4bc6742d22af14ee62511dce83336ccd6529c371bc2f1ceca049b4a404a5cba054df0a5f6676d548bb421cf66cd09fc14f64d49099b5750460afa9a918f8462687a3b94507e3f393ff46a6da4e07202467e986ee81313e3a57cf406446e0cff263f34681543a5c40662ffb446b6bebf9d5e6cb274e42f37b7260ada949332d271e737b67e1bf2336783d85034d2ec14fc8805c6e096607e9a382f6cbb2090051fe66e88a86468473e76d3fd5d7044dc6905eae2ec1217021b271fd87ce56b5d840b32c342c741cc058e7e957b702e40c294198e4d0ca41332cd56df7d50ee78899dfe4926bd61165e148732c3d9ec3536bac99029ca27a7d52596152e5fb7185992b7827fd3f715ca7ebac96cc3cbc216e8c1d838b7af4e61a3a19a2377f1c0f4d0495c3c2b3ee196f5db21b70285dd68edc052f8f10c0aa14b3879f8024f9adc4d29275e2d74668e29121de3a0326e8dc1eef0f86d82d4fbce07b8b57bf2fba3f50e91897b8e45ba2243e1ac5c8d2df46b68fe91ccae1fd938a2e6ea4a78dc57e53b82e72904f3a6074b5493c0c68d5f906360468c672d146af077cb545b0c9b8d567fa2e43c7d886d45c52721154e07688295612f268478c0953a00419529c2e724eea57a967df9c613251996d5716070451a5c3d1347b9acda14aef76804cfa231354525808778524454fc6b76538b38ea80f2d8dd4669e42bdefa4130a3da1c42240f40a244bf4be3f615c74347725fa511b8f2ee2bd87605b4ac0b868e39d3d29e4e04434444e8854704b24eaeb85a292fdd89ce257463351ad28292614fd47417259521c5ba04fdfd9796719f2db706bfab47a13fbd90e8011729ce372af514c11be9bc68fa0d9affebfc38c95e302c2a548b3a484a456c942c0916926bf5116f65ff2139d40b0819b3e4369dc2953e352e4e794afea0a1ece428333f079b24b3ee85c597117ed8a5683d56918b33ec4e82c6d7d1fa8c739a3324104b7d4bd097d916e32cf76874dbf0cf0132782f9999d2c4a24d93f4a0a7b84c794768a826b3365e708acb920d1ef79b0c648cc57911dbb5941acfa7bf0f759c708649f9b192f55b101bcd3dd1894f3f1d99a9b50f2e362642cd7bdf2450eb7124d752b522e7d90abef3ba471b7134ca4c592253521f9af21786019bb7f297e33ac83cb6a34fed3e901c49fba608e4cec7c91c09749dd15d4d06eb401a2c4d5eaecb21d5397683925d6bae686a44d4e2fbe51feccd4d78bb381e1cab97ce67edbd3da9979c6845936cd14e25772396b1d68f703c580a5061f9c2750c84f02c037f12eafbcc8c6292a4f77410be858d1696b100f68c2d21615ab15519278e115b28fa9689c575ca010c82044e7e2ff6b05214a6e63a62648736cc65aa5f6f26699b5917b3b280b2d7b85854df5934788ed9c8e7cc187d4f9d7b94f5cc19c87342a7a7e1e3351bf608332c88057ce6209ada77fedc9f22b22bef88dc5277e1cae458e070cea3a4a8dc944c938ef43df7b0f2954797df8f24fc427890946bca789cdf0c0b5398a7452b799fd845f0b46e0e46c60127479628ba84fa0075ca905a256291e55e2d73ee83920c52df463ff390a6212ad6f6f27971ce35e1b41d06405b7135b8f27b1b51cc0f8d0691e2ac80a68c7587d2c769e213c8e144733049b639131653e4438daf7227a3c772fa2c869d92acc9e1ab67d413d252985c21d5bf5b5db1a615b79816ddda54cef009137a5a24773ac2b429f1045946d770d2aa291d42ce19b845a05185b10ad76dc413436cf76dfe45f8e0cf3c22b708f6bc3d6cabcde1540c7ff6f305349d03ce6181f5c9e422dbde21c7d2ddea2db8fb9fa01a30d647b3df746849a548d6f1513e68b0dc16d1001a6886694b1a28413426bc7a60f85b3d6e5b05eda5771e1a9da3635585015bd17475746cd946494797556640de9490bfc2ca4ce138c64237e1ff19df67bf0c46e48c639a21411ddb772021b11867f8d64dcecffd3865788d0d3541d09cb493891b12060d79420118be948a9fbb7ec93c2b22a4a8823002dcfa8c25187df23f1fc88224dafc8912f3e19f477b2568c47203683f0a318f70baf2a0f6c8ab406d9e736330535efbe70066be70f13787de1ed"}, {0x10, 0x3a}, {0x40, 0x103, 0xd1, "9bfdb6aafebdb8eacd076eccf63096c01932a74a4c59752f67334cfc0699230400d8343ad5f0b572583451fe6b15b1"}, {0x10, 0xff}], 0x15f8}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004000)="f18b1b30a77a54067863ca0c544c131ec6a8dd041f70874d109acc821a9629a036f08a4c36c09c862570a80cfe04fbaee21f0095", 0x34}, {&(0x7f0000004080)="48dc18c457fb367128dbb7335ab3128b73e9516b31d31eae6b33296a70a939a7a73b2aff666e234a9d153ff8788ef77a08e7989d48a68f58c325c97018963b0ccefa4f7feaca83c4c2bc2eabb91bd037cf329fe0e4dacbb1f8f2b47b254bccba53ab5f9dad2007f737b2890d6b59653486fb3df271f084d5e206dd8d7cc4fc02fbe743e078a8b61a73320b7107bfa65803ad7c0efb38c3bddbe879a590117c1841cb458ecdc026dd199bbd2b88e72517571694b89bc803d9e2dbcce76c191a2bf65a60c07cfc92d87d2a5ea138250c48c6a57715", 0xd4}, {&(0x7f0000004180)}], 0x3, &(0x7f0000004200)=[{0x10, 0x10a}, {0x1000, 0x119, 0x7, "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"}, {0x10, 0x110}], 0x1020}}, {{&(0x7f0000005400)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4}}, 0x80, &(0x7f0000005500)}}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000005540)="8a", 0x1}, {&(0x7f0000005580)="541fc9543e0b31fd29374c29d7226685fa55d0bce3e9388367b6e917e3cecd477186a5764025cd6b93bb032f4cc519f4af1e692fdfda73e40c7c98d1bc6bd83a76e75c34ba1515cda78cdb6db290989d04b6e5f1e866c810abc258e4fa9092857e387947a6873161a20d27311bf9aff23d8fb64ebabe0f0846c0e8025ce8b13b17edf6699c33a6b3bf581157348388abb2f5f4967d82a402844627066aff95cd061599b5a4d0520bcac263d080e8508e5b8b48e049cafe92e2e261", 0xbb}, {&(0x7f0000005640)="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", 0xb11}], 0x3}}], 0x5, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaaaa8863"], 0x12) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:13:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x8}, 0x8) [ 546.051737][ T28] audit: type=1804 audit(1599437610.263:34): pid=12303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/68/memory.events" dev="sda1" ino=16082 res=1 [ 546.079674][ T28] audit: type=1804 audit(1599437610.273:35): pid=12303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/68/memory.events" dev="sda1" ino=16082 res=1 00:13:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:13:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) sendfile(r2, r1, 0x0, 0x100000001) 00:13:31 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98bd459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400fff7ffffffffffffff0000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000a00010072737670360000006000020020000400000000000000000000000000090000000000000000000000160100000800010004000000140002000000000000000000000000000000000020000400ffffffff000000000000000001000000fcffffff00e27232da41779bdcb700000004000000"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:13:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20) 00:13:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='vcan0\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 547.166825][ T28] audit: type=1804 audit(1599437612.104:36): pid=12350 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/22/cgroup.controllers" dev="sda1" ino=16090 res=1 00:13:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0x10) write$binfmt_script(r0, 0x0, 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x65c15bf2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pipe(0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x17) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 00:13:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 00:13:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:13:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x2}) [ 548.434983][ T521] tipc: TX() has been purged, node left! [ 548.458733][ T521] tipc: TX() has been purged, node left! 00:13:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:33 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x6}]}}}]}, 0x44}}, 0x0) 00:13:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002000055bd25a80648c63940d0124fc60100035400a0002000200000037153e370a00018004000000d1bd", 0x2e}], 0x1}, 0x0) 00:13:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='vcan0\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:13:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x125}]}, 0x1c}}, 0x0) 00:13:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:34 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 00:13:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x301}, 0x14}}, 0x0) [ 550.833189][T12400] not chained 10000 origins [ 550.838661][T12400] CPU: 1 PID: 12400 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 550.847337][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.857407][T12400] Call Trace: [ 550.860847][T12400] dump_stack+0x21c/0x280 [ 550.865245][T12400] kmsan_internal_chain_origin+0x6f/0x130 [ 550.871071][T12400] ? kmsan_get_metadata+0x116/0x180 [ 550.877246][T12400] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 550.883077][T12400] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 550.890013][T12400] ? update_load_avg+0x860/0x1340 [ 550.895084][T12400] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 550.905856][T12400] ? rb_erase+0x2347/0x27b0 [ 550.911255][T12400] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 550.918991][T12400] ? kmsan_get_metadata+0x116/0x180 [ 550.924321][T12400] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 550.930151][T12400] ? kmsan_get_metadata+0x116/0x180 [ 550.935372][T12400] ? kmsan_set_origin_checked+0x95/0xf0 [ 550.940932][T12400] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 550.947086][T12400] ? _copy_from_user+0x201/0x310 [ 550.952064][T12400] ? kmsan_get_metadata+0x116/0x180 [ 550.957298][T12400] __msan_chain_origin+0x50/0x90 [ 550.962599][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 550.967740][T12400] get_compat_msghdr+0x108/0x2b0 [ 550.972926][T12400] __sys_sendmmsg+0x755/0xf70 [ 550.977682][T12400] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 550.983583][T12400] ? __msan_poison_alloca+0xf0/0x120 [ 550.988887][T12400] ? kmsan_copy_to_user+0x81/0x90 [ 550.993919][T12400] ? _copy_to_user+0x1bf/0x260 [ 550.998980][T12400] ? put_old_timespec32+0x231/0x2d0 [ 551.004299][T12400] ? kmsan_get_metadata+0x116/0x180 [ 551.009515][T12400] ? kmsan_get_metadata+0x116/0x180 [ 551.014741][T12400] ? kmsan_get_metadata+0x116/0x180 [ 551.020406][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.025808][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.031408][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.036863][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.041738][T12400] do_SYSENTER_32+0x73/0x90 [ 551.046324][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.053483][T12400] RIP: 0023:0xf7f63549 [ 551.058086][T12400] Code: Bad RIP value. [ 551.062161][T12400] RSP: 002b:00000000f555d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 551.070597][T12400] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007fc0 [ 551.078578][T12400] RDX: 00000000000001a8 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.086574][T12400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.094649][T12400] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 551.102624][T12400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.111304][T12400] Uninit was stored to memory at: [ 551.116556][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.122291][T12400] __msan_chain_origin+0x50/0x90 [ 551.127262][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.132378][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.137330][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.142099][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.147474][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.153038][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.158247][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.163109][T12400] do_SYSENTER_32+0x73/0x90 [ 551.167634][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.174042][T12400] [ 551.176375][T12400] Uninit was stored to memory at: [ 551.181444][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.187181][T12400] __msan_chain_origin+0x50/0x90 [ 551.192141][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.198054][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.203027][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.207728][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.213109][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.218670][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.223889][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.230178][T12400] do_SYSENTER_32+0x73/0x90 [ 551.235745][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.243028][T12400] [ 551.245360][T12400] Uninit was stored to memory at: [ 551.250405][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.256143][T12400] __msan_chain_origin+0x50/0x90 [ 551.261105][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.266292][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.271528][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.276317][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.281708][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.291522][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.296723][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.301566][T12400] do_SYSENTER_32+0x73/0x90 [ 551.306151][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.315409][T12400] [ 551.317725][T12400] Uninit was stored to memory at: [ 551.322757][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.328478][T12400] __msan_chain_origin+0x50/0x90 [ 551.333421][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.338530][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.343475][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.348141][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.353509][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.359045][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.364249][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.369088][T12400] do_SYSENTER_32+0x73/0x90 [ 551.373585][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.379891][T12400] [ 551.382206][T12400] Uninit was stored to memory at: [ 551.387314][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.393022][T12400] __msan_chain_origin+0x50/0x90 [ 551.397949][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.403065][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.408776][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.413441][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.419775][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.425324][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.430520][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.439468][T12400] do_SYSENTER_32+0x73/0x90 [ 551.444062][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.450977][T12400] [ 551.453296][T12400] Uninit was stored to memory at: [ 551.458399][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.464106][T12400] __msan_chain_origin+0x50/0x90 [ 551.469041][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.474144][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.479094][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.483871][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.490213][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.495840][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.501026][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.506736][T12400] do_SYSENTER_32+0x73/0x90 [ 551.511924][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.518923][T12400] [ 551.521234][T12400] Uninit was stored to memory at: [ 551.526262][T12400] kmsan_internal_chain_origin+0xad/0x130 [ 551.531969][T12400] __msan_chain_origin+0x50/0x90 [ 551.536896][T12400] __get_compat_msghdr+0x6db/0x9d0 [ 551.541997][T12400] get_compat_msghdr+0x108/0x2b0 [ 551.546922][T12400] __sys_sendmmsg+0x755/0xf70 [ 551.551599][T12400] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 551.557935][T12400] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 551.563485][T12400] __do_fast_syscall_32+0x2af/0x480 [ 551.568679][T12400] do_fast_syscall_32+0x6b/0xd0 [ 551.573618][T12400] do_SYSENTER_32+0x73/0x90 [ 551.578118][T12400] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 551.585397][T12400] 00:13:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0x10) write$binfmt_script(r0, 0x0, 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x65c15bf2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pipe(0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x17) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 00:13:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000d26000/0x3000)=nil, 0x3000, 0x0, 0x2011, r0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) mmap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) 00:13:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x10, &(0x7f00000000c0)=""/4107, &(0x7f0000001140)=0x100b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100), 0x4) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@default, @rose, @remote, @default, @null, @bcast, @netrom, @null]}, &(0x7f0000000140)=0x48) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000001100)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) 00:13:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) close(r3) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) r4 = socket$xdp(0x2c, 0x3, 0x0) gettid() syz_open_procfs$namespace(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) [ 551.587713][T12400] Local variable ----msg_sys@__sys_sendmmsg created at: [ 551.594635][T12400] __sys_sendmmsg+0xbb/0xf70 [ 551.599212][T12400] __sys_sendmmsg+0xbb/0xf70 [ 551.999886][ T28] audit: type=1400 audit(1599437616.934:37): avc: denied { read } for pid=12414 comm="syz-executor.4" path="socket:[41823]" dev="sockfs" ino=41823 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 552.215147][ T28] audit: type=1804 audit(1599437617.054:38): pid=12424 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/15/cgroup.controllers" dev="sda1" ino=16118 res=1 00:13:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:37 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@dev, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0cfdff", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:13:39 executing program 0: socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001600)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}, @IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0xa, 'wg2\x00'}}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) sendto$inet6(r0, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) 00:13:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x16, 0x0, 0x0) 00:13:39 executing program 4: r0 = socket(0x10, 0x803, 0x3) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e21, 0x2, @local, 0x3}}}, 0x3a) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x66527000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325, 0x24b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32], 0x2c}}, 0x0) 00:13:39 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:13:39 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x64, 0x2, [@TCA_FLOW_MASK={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x6}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x94}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:13:39 executing program 3: r0 = socket(0x2, 0x803, 0xff) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8931, &(0x7f0000000040)={'macsec0\x00'}) [ 554.540704][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 554.610985][T12458] batman_adv: batadv0: Adding interface: bridge1 [ 554.617593][T12458] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.650764][T12458] batman_adv: batadv0: Interface activated: bridge1 00:13:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4, 0x5872, 0x400, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r5, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) sendfile(r1, r0, 0x0, 0x8000000000004) [ 554.658924][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:13:39 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:13:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}]}}}]}, 0x3c}}, 0x0) 00:13:39 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x1) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x5, 0x7, 0x100, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 555.020974][T12466] tipc: Enabling of bearer rejected, illegal name [ 555.119789][T12466] tipc: Enabling of bearer rejected, illegal name [ 555.169551][T12461] batman_adv: batadv0: Adding interface: bridge2 [ 555.177646][T12461] batman_adv: batadv0: The MTU of interface bridge2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.204905][T12461] batman_adv: batadv0: Interface activated: bridge2 00:13:40 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:13:40 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x9562e000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{}, {@fixed}]}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) socket(0x0, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)) write$cgroup_int(r0, &(0x7f0000000200)=0x7f, 0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socket(0xa, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="37dbecd06a11f2818a4f0e7ed857dbca68fa4f34bf4f7101046100778c94f88c5901da31c22855cd16a5f6a4158e4ddbe0ba6069258c7d758e0a406486658d18e03952d36abc226f09bdb7dd403786cc32aec1b5ad24a2947b3b5a75f1748a6fe67cf04d5d224e2562b0a6bfbc4ca24994bd19a0ac"], &(0x7f0000000240)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)=0xffffffff, 0x4) [ 555.500131][T12480] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 00:13:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x80001}, 0x3c) [ 555.955437][ T28] audit: type=1804 audit(1599437620.885:39): pid=12489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/83/memory.events" dev="sda1" ino=15694 res=1 00:13:40 executing program 4: syz_emit_ethernet(0x142, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x134, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @broadcast, {0x46, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr, {[@generic={0x0, 0x7, 'j!K\fO'}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010600}]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x7, "3668c7c1a1"}, {0x0, 0x12, "c013b68ee94d844dfd3d251364740ffd"}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x12, "3da9aa21004e25d2b45513de2a73f993"}, {0x0, 0xf, "5a08656de7dd11d43c8b75ef45"}, {0x0, 0xc, "50178af9f36de51b95f2"}, {0x0, 0xa, "1eef5c0c08c0bf9b"}, {0x0, 0x5, '6z)'}, {0x0, 0x6, "2d05f73d"}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@local}, {@broadcast}, {@dev}, {@remote}]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {}]}, @ssrr={0x89, 0x17, 0x0, [@multicast2, @multicast2, @multicast1, @multicast1, @dev]}]}}}}}}}, 0x0) [ 555.984520][ T28] audit: type=1800 audit(1599437620.885:40): pid=12489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15694 res=0 [ 556.010828][ T28] audit: type=1804 audit(1599437620.905:41): pid=12489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/83/memory.events" dev="sda1" ino=15694 res=1 00:13:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x20) 00:13:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001114010000000000000000000800010000000000080003000100000008004a000000000008004b0013"], 0x30}}, 0x0) [ 556.555203][ T28] audit: type=1800 audit(1599437621.365:42): pid=12489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15694 res=0 [ 556.577915][ T28] audit: type=1804 audit(1599437621.375:43): pid=12489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/83/memory.events" dev="sda1" ino=15694 res=1 00:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="f4", 0x1}, {&(0x7f0000000540)='\a', 0x7ffff000}], 0x2}}], 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 00:13:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:13:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r2 = socket$inet6(0x10, 0x2, 0x15) sendto$inet6(r2, &(0x7f0000000000)="1ba0000012001d0d89fdc5cbdd0457987028ed4dca14a7960f0f8ec8da78031c7660b08f515e", 0xff3b, 0x0, 0x0, 0x2e2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x2}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 00:13:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20048010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x50}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000100001042bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="098e225a3243493537e4ecb866255927fcfa18853a346fec9865adfe7c1c057238dfe9838a31a11f0cc93a6be8eff15e6a96f8658773433bc33596348643643cffcc426f4408d9903a990b64f099e416bff6b43787fdb6c2ce6473654f98dd42c041245bfd170ae3011a3e2bd90c87985bec942cf1cbd3c84a4abc4531068b3aeb389df3e99ec58ad4028b6affc2cf277cdf835e00"/164], 0x4c}}, 0x0) [ 557.340778][T12527] netlink: 40763 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}) [ 557.482930][T12532] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:13:42 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000103, 0x0) 00:13:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000d26000/0x3000)=nil, 0x3000, 0x0, 0x2011, r0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) mmap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 00:13:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000001c0)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x150}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000001600)=""/188, 0xbc}], 0x2}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) sendto$inet(r0, &(0x7f0000000100)='\f', 0x300, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) [ 558.356645][T12535] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:13:43 executing program 3: close(0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5131020000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 00:13:43 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000c34010400008000000000040004800900020073797a30000000000900010073797a3000000000080003400000000022000200b76312c4117379", @ANYRESDEC], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0xa0f10300, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 00:13:43 executing program 5: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x2c}]}, 0x40}}, 0x0) 00:13:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) [ 558.941943][T12585] device macvtap1 entered promiscuous mode [ 558.947857][T12585] device virt_wifi0 entered promiscuous mode [ 559.039462][T12585] device virt_wifi0 left promiscuous mode [ 559.263344][ T17] Bluetooth: hci2: command 0x0406 tx timeout 00:13:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) 00:13:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:13:44 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x78) [ 559.678471][T12591] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0xffffffffffffffff) 00:13:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x82051, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000500) 00:13:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800c00010076657468"], 0x48}}, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/170, 0xaa, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580060002000100000008000500", @ANYRES32=r6], 0x50}}, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r3}}, 0x24}}, 0x0) 00:13:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_connmark={0x38, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2adee4ca62d348e2}}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:13:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) [ 560.460342][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 00:13:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) [ 560.589308][ T28] audit: type=1804 audit(1599437625.515:44): pid=12624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir925762639/syzkaller.kPu85f/35/cgroup.controllers" dev="sda1" ino=16177 res=1 [ 560.617635][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14}, @CTA_TUPLE_PROTO={0xc}]}]}, 0x58}}, 0x0) 00:13:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@loopback}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x4c, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "10"}}]}, 0x13c}}, 0x0) 00:13:46 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, 0x0, &(0x7f00000000c0)) [ 561.090900][T12645] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 561.099268][T12645] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 561.107708][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:13:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000ec0)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff7f0000010000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000d20000000000000048000200656362286369706865725f6e756c6c29000000fffffff70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400170002000000000000000000000000000000000000003f"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 561.435231][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.480931][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:46 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36"], 0xa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="23003eb812fcec919953ab7838f4c2980000000000000000f34388d1d7dbba", @ANYBLOB="a4e43caae05427874aae9f2edc6249c8d116c24443e79d85231d653c093e7cd489c903e5207f86ec98e493ec60bdbc0a46c2eb08deaca345879ddaae015e034cb8212c6d0c52a21a7cfdef328d70b17333ab232f76c077ba918b70900d7f50a8641661223f20b5b2505afeb7488c377abc9d0c38a9f3302308419f370d545df9583ddc5bdc8e65db8adf338536da20580213eafee7a1f087199ab82def85369e10cf91e63f3dbd93a2d9a0f1ecaa2cf5941f4871e8c8056fb0", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x2004040}, 0x200000c0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80), 0xfffffffffffffd0f, 0x0}, 0x8005) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 00:13:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) [ 562.013154][ T28] audit: type=1804 audit(1599437626.946:45): pid=12674 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/88/memory.events" dev="sda1" ino=16181 res=1 [ 562.040106][ T28] audit: type=1800 audit(1599437626.946:46): pid=12674 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16181 res=0 [ 562.287482][ T28] audit: type=1804 audit(1599437627.006:47): pid=12676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/88/memory.events" dev="sda1" ino=16181 res=1 [ 562.323522][ T28] audit: type=1804 audit(1599437627.106:48): pid=12676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/88/memory.events" dev="sda1" ino=16181 res=1 00:13:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket(0x1, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x3c}}, 0x0) 00:13:47 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f0000000900)="cea4bbd7a73bbcb12d367c552f9bb4b2375deda1faa6824304875ae71575c47b9058528288f1fcc8674a075c2c6598546aa18701861d08aec648a8c21247d2926c7a0d3a41075264f7790c62d37df1ee475801ab73bcd4e86ffc9633de31769ed3c4bb2a45006ee0bbd6f78b5cf8a808c9a0096d3fdf3ba85d3b53e7dcee2777e4d141524d99824679bfe5ecd30ac81c24e7ccbf0646eab56531b6358dd79bae446398bf01d89c606e5c03e62c198e039a5c6c6863f57d2965b1263982e7ccc12b10c40b21cd2ffe82e8631a0574b9bc8007c285f340a3", 0xd7}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f0000001a00)="7f493e9ada4a3596a4697342c91ec097fb373c1c0b651ae05a309ea7486c494a9a6d190089264e6c04d0ed0c0d5b9de917d2368ec5552d55725e5b4a5de79f22aa1eaa130f7b91f46a5a9d5fd0d1dabfeb11a2be928676bf671c56fa95b2eb02d171fd456ac29d822762fb561db4d13c45d3e37724891ea33464bc9102730d5055da2654aa179245d842f33b03aed74d93b330418c635bea5330fd0bed84c6936f3a28d55665b594715c670b4331420a42fe3f4c84b20976c5415750922a8fa715e202ac7174e075755ecb60fd520293f0451880aa6cd5b27232fa19a7026629219a", 0xe2}, {&(0x7f0000000780)="391236d0c59b7be68017392ba9ee96d466dbf941161cb8869385c606d2d4e1429503592ea1319839b983aee7c28e9fb110b5e7444b541ad51d32dc7003a85eeeeb1a9721fa766196e1311f1d619ba95a469adc3b5735cc69e12770e324feb0e378904366f0faded23e896c1d4862f66e1d62646fba2c7f84f14e31c513b7b9aa7e781a317744a9dba54d80991e5ef0a76ac7054d0c4f60f3777d66d8592a1c766dac1f3048c0f3ec420179d645937b6b19", 0xb1}, {&(0x7f0000000840)="c61a9bdf199ec974058fc9488dc329f1365e4d463101f0ddbdd0f47de5aff476019e51122cc43e3edba4859edf47daefc875c9e88fdeedc9885b87568bf565214f6c17ac1d624b76ff791d280579e25648a8a9472a0e47e542ed7ba61508c6f092e25455ea7ed3277ea31ad810c083368c0a2df3655c1cf62c0f1cab328137a8c0a43d2625", 0x85}, {&(0x7f0000000a00)="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", 0x9b8}], 0x7, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "4101940008000083", "69c6c72e0bd784712f6c1f00", 'q\x00', "58d3c21fad3ebb88"}, 0x28) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="17b9eeb9f1bbbfba00115945cc0b4da8e922e2257075a36f4da0fb09da3a37b7de19d6b7e8a61cddecc93e5411ae74e90f9cbd2624e657e7a352bafd85bc84cfdc2ff2f9", 0x44}, {&(0x7f00000003c0)="d9e6323e29e66fa36c767c1930e1cefa78f03966072b859b454d06c6cf5049d103f2da0da40b235125640baf87e29efdc243521a034e8b02217793c6bc2901d63b0ce966049174638829064cd35224ac97b080f8c237b05dc776e55479d043f75a8585facfa23802d8bf1a74b9f100cf601d25755142747d3928ce335dacd1f1a2f4c0c567ab6684d5cfa98a7dcbd5b48128bb2f7ec2ea702d6a7492017106e9dad24ee7a086d2f4afed418e7755934396d8e0a51f372c175a369fcdd20cbf0e8e1f01c72bc8ccde77bf277c8a177338aad026c3395cf9a69290ffe1152c0a695755db1d1976f5d8046baaeabe3fccd8a1c0", 0xf2}], 0x2) splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0) 00:13:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:13:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 00:13:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x3c]}]}, 0x40}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000), 0x1000000, 0x1000}, 0x20) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) 00:13:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 562.646941][ T28] audit: type=1804 audit(1599437627.336:49): pid=12674 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/88/memory.events" dev="sda1" ino=16181 res=1 [ 562.673311][ T28] audit: type=1800 audit(1599437627.336:50): pid=12674 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16181 res=0 [ 562.699434][ T28] audit: type=1804 audit(1599437627.366:51): pid=12676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/88/memory.events" dev="sda1" ino=16181 res=1 00:13:47 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x6, 0x0, &(0x7f0000000540)) 00:13:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) [ 562.871970][T12696] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 00:13:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x4, 0x9) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x1, 0x5, 0xe, 0xfffffc00}, {0xf03, 0x6, 0xf8, 0x3}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r4 = gettid() r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$FIONCLEX(r2, 0x5450) r6 = socket$inet6(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={0x1c, r8, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) 00:13:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) 00:13:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000000), 0x3) 00:13:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) [ 563.519465][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 563.529818][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 563.555762][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.565018][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:13:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x118, 0x118, 0x118, 0x0, 0x118, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'bridge_slave_1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) [ 563.753614][T12717] device bond_slave_0 entered promiscuous mode [ 563.759928][T12717] device bond_slave_1 entered promiscuous mode [ 563.767564][T12717] device macvlan2 entered promiscuous mode [ 563.773578][T12717] device bond0 entered promiscuous mode [ 563.781627][T12717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 563.789599][T12717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 563.798855][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready 00:13:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) [ 564.451311][T12717] device macvlan3 entered promiscuous mode [ 564.458557][T12717] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 564.469512][T12717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready 00:13:49 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000040)="ff0204000000000100"/20, 0x14) [ 564.506933][T12718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 564.525913][T12718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.535649][T12718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.615860][T12696] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 00:13:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x82, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3a, @rand_addr=0x64010100, 0x4e21, 0x3, 'sh\x00', 0x2, 0x8001, 0x9}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[], 0x220) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x10001}) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0xdbd}) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) [ 565.258376][T12755] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20001 [ 565.278014][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready [ 565.515139][T12758] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20001 00:13:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0), 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:13:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:13:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd60"], 0x42) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:13:50 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000000)={0x13, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 566.339238][T12777] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:52 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) recvmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x3b, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x34000}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 00:13:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) [ 567.960089][T12720] IPVS: ftp: loaded support on port[0] = 21 [ 567.991987][T12722] IPVS: ftp: loaded support on port[0] = 21 00:13:54 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000013c0), &(0x7f0000001400)=0x4) 00:13:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0xdc030000, 'lblcr\x00'}, 0x2c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x6}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 00:13:54 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "153c56973f4ed858dc343150e875cd52f60f3f436b81db53bfbc04ef179af357", "6fdfe27c3f1ee651df2e1f55a21def3d31dd08e498ee65d660efa749f6fff886", "8ac736b653a76af6af7680370ec98f3c7d8f264364d4b0e84f9a21358a2e9029", "5fdb4a181c2a495ebbd8f78ee888d8c603bdaee1a327a96df13d6e5de642e359", "56d7b8764bb86f84316f41a076b50bd990ac2c030236eadc43e5cc622847fe0c", "bf0dde1c32a2f11f200e184a"}}) 00:13:54 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="4b56b6ccf306008b65d8b4ac", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000001100)=""/88, 0x58}, {&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000140)=""/124, 0x7c}], 0x4}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0xfffffffffffffd9f, &(0x7f0000002d80)=[{&(0x7f0000001c00)="b55381cca459b6cd48487ded6bf0b7d9731bb898342ae3489191c65a0d14dd9144a10907cd98ec3f42b0f2f8a3929b0edaece8f67e73c7ea3e65c640dd43f3f06d3c722356050ec28b442de61e2b5de7e46370222cfc185db4f92d039aeb060e83b4b735cca6549f1ba601b97dac1221a2c03eba943b2011244ad58b34d54c05ba00cb5a17e6ebefcbdad3cd7cf95144283519a1cbe200592a", 0x99}, {&(0x7f0000001cc0)="af46950c95861316e989e97f56a50bb7f9c56145e6ac9bc76d374da8651266f0c8df64d7b00142a5fc405c1d223f99350b1beb52739d33c4ea2bda07f9bb3675bac20c381fed788c5a3897889bd1bc3ce921ca576e2fda30be424d7a08378c0c525a684e327fa2f76ac403aca5061f462cd6e11413f66a40e2b3c1a3069fe5476eafcd78173d55e51153af96ea8ca7dbf4540353256002ef1a6a7eb934f66b584a828128b1d34ad9c5fcb4c22e33facf", 0xffb4}, {&(0x7f0000001d80)="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", 0x446}], 0x3}}], 0x300, 0x1) 00:13:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:13:54 executing program 5: r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x34, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/381, @ANYRESDEC, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0xc32afaf580f22372}, 0x4000011) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vxcan1\x00', {'batadv0\x00'}, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x998) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000700)="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", 0x78d}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) 00:13:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000140)=@nfc, 0x80) 00:13:55 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:13:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:56 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffff5f, &(0x7f00000000c0)=[{&(0x7f0000000000)="24a900003efce0845ca7f89c00080016100400ff7e", 0x24}], 0x1}, 0x8000000) write(0xffffffffffffffff, &(0x7f0000000000)="2400000021002553e5e86e70af57bb2602000020001c000000ff000c080017", 0x1f) sendmmsg$alg(r0, &(0x7f0000000140), 0x2, 0x0) 00:13:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 00:13:56 executing program 5: r0 = socket(0x10, 0x6, 0x3ff) accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x100) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000003a40)={0xa, 0x4f25, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) poll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2000080001, 0x84) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0x200115bc}], 0x1}}], 0xffffff1f, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000380)="85", 0x1, 0x0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x3f, 0x2, 0xff, 0x7}, {0x401, 0x3, 0x2, 0x8000}, {0xf1, 0xd9, 0x8, 0x8}, {0x3, 0x2, 0x5, 0x101}, {0xfffb, 0x4, 0x1, 0x80000001}, {0x0, 0x1, 0x81}, {0x2, 0x3, 0xa9, 0x732e}]}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/237, 0xed, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64, @ANYRES64, @ANYRES16=0x0, @ANYRES32], 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r3 = socket$inet(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) [ 574.776646][T12852] IPVS: ftp: loaded support on port[0] = 21 [ 575.007852][ T8572] tipc: TX() has been purged, node left! 00:14:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}}, 0x0) 00:14:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x44}}, 0x0) 00:14:00 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 00:14:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:14:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 00:14:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(0xffffffffffffffff) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x23, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x68}}, 0x0) [ 575.382644][T12932] device bridge1 entered promiscuous mode 00:14:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x3097) mmap(&(0x7f0000891000/0x3000)=nil, 0x3000, 0x2000003, 0x8010, r6, 0x50c32000) 00:14:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) [ 575.658890][T12932] device bridge2 entered promiscuous mode 00:14:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000000b000500010067"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendfile(r2, r1, 0x0, 0x1000000ef) 00:14:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000e0ff) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400074007a2a300050001", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) 00:14:01 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f000", 0x10, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x10]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) [ 576.182675][ T28] audit: type=1804 audit(1599437641.117:52): pid=12980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir925762639/syzkaller.kPu85f/44/cgroup.controllers" dev="sda1" ino=16226 res=1 [ 576.401554][ T28] audit: type=1804 audit(1599437641.187:53): pid=12980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir925762639/syzkaller.kPu85f/44/memory.events" dev="sda1" ino=16234 res=1 [ 576.427400][ T28] audit: type=1800 audit(1599437641.187:54): pid=12980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16234 res=0 [ 576.450323][ T28] audit: type=1804 audit(1599437641.217:55): pid=12980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir925762639/syzkaller.kPu85f/44/memory.events" dev="sda1" ino=16234 res=1 00:14:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x74) [ 576.476388][ T28] audit: type=1804 audit(1599437641.237:56): pid=12980 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir925762639/syzkaller.kPu85f/44/cgroup.controllers" dev="sda1" ino=16226 res=1 [ 576.506135][ T28] audit: type=1804 audit(1599437641.287:57): pid=12987 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/42/cgroup.controllers" dev="sda1" ino=16225 res=1 [ 576.534516][ T28] audit: type=1804 audit(1599437641.367:58): pid=12987 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/42/cgroup.controllers" dev="sda1" ino=16225 res=1 00:14:01 executing program 4: syz_emit_ethernet(0x7b, &(0x7f0000000080)={@multicast, @broadcast=[0x0], @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be, 0x1, 0x0, [], 'l'}}}}}}}, 0x0) 00:14:01 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0x0) 00:14:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4f25, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 00:14:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x72, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r6, 0xe3, "24c7c77e279c7eb18e76ad50c8eba36809a2931ed9f54b85be34901cd190bde7e654a7acf9abb999ad559276d644478940ef61c1f2169bd0af989c07dcc9d6125db1de2e3b955a7d71b5939da293f0c76669921c4d4f22c94853b7b300f2525a969eae5a74f4e136a7bf222a0c1353e6e13b881fb6e3168a84587b10d5f43a144a9e0d77d6dfab7b18202c7e1771d5a3e17d058153711185ad4a0b04955dddfbd9f16bd9be12d4f1764584c46e37c702a973f95f0c562367b2bdb2184fc0d0ccbf90b860480c332195f765024b847903806a40bb7e1ac6c9c0319680808f2db108b190"}, &(0x7f00000000c0)=0xeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 00:14:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:14:03 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 00:14:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5}]}, 0x58}}, 0x0) 00:14:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:14:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x74) 00:14:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102e60001007a58008000f8ac000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x12b00000a) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x438, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@uncond=[0x2], 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9c2f413b976613bad414a105f4bdf97425ce81c5d00"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="133a078a8218", @empty, @rand_addr, @dev}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x10) [ 579.957461][ T28] audit: type=1804 audit(1599437644.888:59): pid=13025 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/45/cgroup.controllers" dev="sda1" ino=16241 res=1 00:14:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) [ 580.230794][ T28] audit: type=1804 audit(1599437644.968:60): pid=13025 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/45/cgroup.controllers" dev="sda1" ino=16241 res=1 00:14:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x6}}], {0x14}}, 0xa4}}, 0x0) 00:14:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) [ 581.954441][T13021] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 581.973059][T13021] device ipvlan2 entered promiscuous mode [ 582.413286][T13001] IPVS: ftp: loaded support on port[0] = 21 [ 582.433059][T13020] IPVS: ftp: loaded support on port[0] = 21 [ 582.443920][T13036] IPVS: ftp: loaded support on port[0] = 21 [ 583.027361][T12317] tipc: TX() has been purged, node left! 00:14:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000000)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a612173ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a39", 0xd0}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 00:14:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff38, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="1100000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@dev, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80140038}) r3 = socket$inet6(0xa, 0x80003, 0x3) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}) 00:14:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) 00:14:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x800, 0x8, 0x0, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffefe, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xfc00, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001300)="d004d852b93c1ce94730a3c8a2201554a58f9b6615d1ea27ddd42eeea211d7352793fd3c17572ff09e479b0ec178007c49f6f9c3a83caf74837c2abd4abbe907be0cf41758263ee4dfb805b1cff2bc8e79a568a79da888931f1d83bebd05d4b13e8b2e6b8e15b4d6415f7108d74d3c2b763a5c77c7610a4a0375472c3f5e044112e1be54abda82fad71a20ed2b0f0589bf", 0x91, 0x8804, &(0x7f00000013c0)={0xa, 0x0, 0x7, @private0, 0x6, 0x2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000020103000000000000000000000000000800094000000000"], 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_delrule={0x24, 0x21, 0x505, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x8880) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000012c0)={&(0x7f0000001100), 0xc, &(0x7f0000001140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="05f22e10a4689137884c46a9783ccf2257ee78da10887fd279048c59becd329cc4cdefabc019c964fcb47bb0aeb2cf14a5747244fb71d0936679c22252a888b8bf24bd352d06d25b1beda901f3f41e2cb83b34034fed549a34ce142f1e121207d066a0aed60ecc34c19d99f99ff4c8ab67ec0bc5", @ANYRES16=r5, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x84}, 0x8010) getsockname$packet(r3, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) [ 583.320515][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 583.491445][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 583.887995][T13129] device geneve2 entered promiscuous mode 00:14:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 00:14:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaa1f01bb86dd60"], 0x8e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 00:14:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x313, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@ipv4={[], [], @local}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 00:14:09 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) 00:14:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) r1 = getpid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={r1}, 0xc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x46812, 0x0, 0x1f4) socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/net\x00') getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000240)=0x30) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0x8) sendto$inet6(r2, &(0x7f0000000100)="f5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r4}, 0x8) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) 00:14:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 00:14:09 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x248, 0x318, 0x248, 0x33a, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1={0xff, 0x3}, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) getsockopt(r2, 0x0, 0x3, &(0x7f0000000280)=""/119, &(0x7f0000000300)=0x77) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000140)={@ipv4={[], [], @multicast2}, r9}, 0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 00:14:09 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000340)="cc068c375c84abcbb7a453adbcaa0a864e94117a8d445f87be16cc2274c1bd836ea96ca3bc63c53a429bd848a326c815a1501d2aba4197db74bac112a212ea7c1dc5dc7ef8824a018cb27c35ad7a323b9111c641545f86f66135949d2ee79f9f754b208b9073162d1002bf19c72a52681c5b283b7c25f3e9b8d44faa7bb420dc65fe362fd0294257dde532192d594cbe46ee0f000df299763de296a680dc176fc2b4626f3875945910ae5475cff5ddd8ea35ff7fca1598") recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@ax25={{0x3, @rose}, [@null, @netrom, @remote, @null, @rose, @null, @null, @default]}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000440)=""/250, 0xfa}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=""/151, 0x97}, 0x2100) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)='0', 0x1}], 0x1) [ 585.473422][T13151] syz-executor.3 (13151) used greatest stack depth: 3512 bytes left 00:14:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) 00:14:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}}, 0x0) 00:14:11 executing program 5: unshare(0x40000000) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x29}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x3, 0x0, "f3ead8d0cdcbb2f5c1806cdb6b73f464783f8299fbcbdb06d1d5edcba4e821fd22a327bfd5560269c70b81f801bedb7942ffb681d80921cc74aeae5fd231b429222b1dc2c7a9b5cbf6b54ecde5a2a8a8"}, 0xd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008400000007470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRESHEX, @ANYBLOB="5e9dddaf243f5712336c7b52723a207bef1ded355a6fa7ad979926f2ecdef3deb3616584b3c2b0cf4db2d85531e05b979fe8a5b671089b0b2cfb06982afca32711ef746e08ab973ad17d417c53ff948cb3c1d18c79893eed2f8a7cc060ee81b18844e399ac2903be7ade3beb954096140008000000000000a99f5a65959556a541c1f13386d9cae96f38bcb16d0dc85c67e6d7cf6b3f59d6f93ec98bae1f0d888f8cf3b225b6aede4e153998ba27dc6b69e501"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e1c36e4858"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x11) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="00a69217", @ANYRESHEX=r0], 0x4}}, 0x0) close(r0) 00:14:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}, 0x10) 00:14:11 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r0, 0x0) close(r0) [ 586.774208][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 586.847457][T13187] IPVS: ftp: loaded support on port[0] = 21 [ 587.116125][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 587.368939][T13187] IPVS: ftp: loaded support on port[0] = 21 [ 587.486125][T13181] not chained 20000 origins [ 587.490691][T13181] CPU: 0 PID: 13181 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 587.499366][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.509441][T13181] Call Trace: [ 587.512760][T13181] dump_stack+0x21c/0x280 [ 587.517385][T13181] kmsan_internal_chain_origin+0x6f/0x130 [ 587.524441][T13181] ? kmsan_internal_chain_origin+0xad/0x130 [ 587.530450][T13181] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 587.536622][T13181] ? kmsan_memcpy_metadata+0xb/0x10 [ 587.541932][T13181] ? __msan_memcpy+0x43/0x50 [ 587.547235][T13181] ? ____sys_sendmsg+0xe58/0x1240 [ 587.552281][T13181] ? __sys_sendmmsg+0x808/0xf70 [ 587.557153][T13181] ? __se_compat_sys_sendmmsg+0xcd/0xf0 [ 587.562720][T13181] ? __ia32_compat_sys_sendmmsg+0x56/0x70 [ 587.568495][T13181] ? __do_fast_syscall_32+0x2af/0x480 [ 587.573950][T13181] ? do_fast_syscall_32+0x6b/0xd0 [ 587.579084][T13181] ? do_SYSENTER_32+0x73/0x90 [ 587.583783][T13181] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.590510][T13181] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 587.596554][T13181] ? kmsan_get_metadata+0x116/0x180 [ 587.601972][T13181] ? kmsan_set_origin_checked+0x95/0xf0 [ 587.607657][T13181] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 587.613752][T13181] ? _copy_from_user+0x201/0x310 [ 587.618726][T13181] ? kmsan_get_metadata+0x116/0x180 [ 587.623944][T13181] __msan_chain_origin+0x50/0x90 [ 587.628908][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 587.634048][T13181] get_compat_msghdr+0x108/0x2b0 [ 587.639006][T13181] __sys_sendmmsg+0x755/0xf70 [ 587.643755][T13181] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 587.650000][T13181] ? __msan_poison_alloca+0xf0/0x120 [ 587.655397][T13181] ? kmsan_copy_to_user+0x81/0x90 [ 587.660446][T13181] ? _copy_to_user+0x1bf/0x260 [ 587.665241][T13181] ? put_old_timespec32+0x231/0x2d0 [ 587.670462][T13181] ? kmsan_get_metadata+0x116/0x180 [ 587.675680][T13181] ? kmsan_get_metadata+0x116/0x180 [ 587.680916][T13181] ? kmsan_get_metadata+0x116/0x180 [ 587.686136][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 587.691534][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 587.697133][T13181] __do_fast_syscall_32+0x2af/0x480 [ 587.702540][T13181] do_fast_syscall_32+0x6b/0xd0 [ 587.707418][T13181] do_SYSENTER_32+0x73/0x90 [ 587.711987][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.718318][T13181] RIP: 0023:0xf7f05549 [ 587.722381][T13181] Code: Bad RIP value. [ 587.726472][T13181] RSP: 002b:00000000f54de0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 587.736289][T13181] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200092c0 [ 587.744450][T13181] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 587.755480][T13181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.763503][T13181] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 587.771525][T13181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.779526][T13181] Uninit was stored to memory at: [ 587.784818][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 587.790744][T13181] __msan_chain_origin+0x50/0x90 [ 587.795796][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 587.800925][T13181] get_compat_msghdr+0x108/0x2b0 [ 587.805945][T13181] __sys_sendmmsg+0x755/0xf70 [ 587.811670][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 587.817417][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 587.824222][T13181] __do_fast_syscall_32+0x2af/0x480 [ 587.829603][T13181] do_fast_syscall_32+0x6b/0xd0 [ 587.834458][T13181] do_SYSENTER_32+0x73/0x90 [ 587.838964][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.845276][T13181] [ 587.847593][T13181] Uninit was stored to memory at: [ 587.852961][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 587.861017][T13181] __msan_chain_origin+0x50/0x90 [ 587.865969][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 587.871088][T13181] get_compat_msghdr+0x108/0x2b0 [ 587.876016][T13181] __sys_sendmmsg+0x755/0xf70 [ 587.880709][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 587.886082][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 587.891626][T13181] __do_fast_syscall_32+0x2af/0x480 [ 587.896817][T13181] do_fast_syscall_32+0x6b/0xd0 [ 587.901658][T13181] do_SYSENTER_32+0x73/0x90 [ 587.907803][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.918810][T13181] [ 587.921129][T13181] Uninit was stored to memory at: [ 587.926261][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 587.931971][T13181] __msan_chain_origin+0x50/0x90 [ 587.937193][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 587.943253][T13181] get_compat_msghdr+0x108/0x2b0 [ 587.948553][T13181] __sys_sendmmsg+0x755/0xf70 [ 587.953330][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 587.958914][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 587.965717][T13181] __do_fast_syscall_32+0x2af/0x480 [ 587.971107][T13181] do_fast_syscall_32+0x6b/0xd0 [ 587.975954][T13181] do_SYSENTER_32+0x73/0x90 [ 587.980468][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 587.986797][T13181] [ 587.989119][T13181] Uninit was stored to memory at: [ 587.994152][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 587.999884][T13181] __msan_chain_origin+0x50/0x90 [ 588.004821][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 588.010026][T13181] get_compat_msghdr+0x108/0x2b0 [ 588.015040][T13181] __sys_sendmmsg+0x755/0xf70 [ 588.019707][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 588.025068][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 588.030707][T13181] __do_fast_syscall_32+0x2af/0x480 [ 588.035907][T13181] do_fast_syscall_32+0x6b/0xd0 [ 588.040758][T13181] do_SYSENTER_32+0x73/0x90 [ 588.045263][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.051568][T13181] [ 588.053894][T13181] Uninit was stored to memory at: [ 588.058908][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 588.064616][T13181] __msan_chain_origin+0x50/0x90 [ 588.069542][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 588.074645][T13181] get_compat_msghdr+0x108/0x2b0 [ 588.079584][T13181] __sys_sendmmsg+0x755/0xf70 [ 588.084273][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 588.089633][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 588.095341][T13181] __do_fast_syscall_32+0x2af/0x480 [ 588.101493][T13181] do_fast_syscall_32+0x6b/0xd0 [ 588.106344][T13181] do_SYSENTER_32+0x73/0x90 [ 588.110857][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.117164][T13181] [ 588.120194][T13181] Uninit was stored to memory at: [ 588.125478][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 588.131274][T13181] __msan_chain_origin+0x50/0x90 [ 588.137072][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 588.142213][T13181] get_compat_msghdr+0x108/0x2b0 [ 588.147248][T13181] __sys_sendmmsg+0x755/0xf70 [ 588.152078][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 588.157541][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 588.163204][T13181] __do_fast_syscall_32+0x2af/0x480 [ 588.168436][T13181] do_fast_syscall_32+0x6b/0xd0 [ 588.173395][T13181] do_SYSENTER_32+0x73/0x90 [ 588.177899][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.184517][T13181] [ 588.186842][T13181] Uninit was stored to memory at: [ 588.191867][T13181] kmsan_internal_chain_origin+0xad/0x130 [ 588.197577][T13181] __msan_chain_origin+0x50/0x90 [ 588.202649][T13181] __get_compat_msghdr+0x6db/0x9d0 [ 588.207772][T13181] get_compat_msghdr+0x108/0x2b0 [ 588.212715][T13181] __sys_sendmmsg+0x755/0xf70 [ 588.217385][T13181] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 588.222747][T13181] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 588.228286][T13181] __do_fast_syscall_32+0x2af/0x480 [ 588.233473][T13181] do_fast_syscall_32+0x6b/0xd0 [ 588.238315][T13181] do_SYSENTER_32+0x73/0x90 [ 588.242968][T13181] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 588.250153][T13181] [ 588.252478][T13181] Local variable ----msg_sys@__sys_sendmmsg created at: [ 588.260454][T13181] __sys_sendmmsg+0xbb/0xf70 [ 588.265219][T13181] __sys_sendmmsg+0xbb/0xf70 00:14:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x30, 0x0, &(0x7f0000000140)) 00:14:13 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000031003dfb00000000000000000000000034000100300001000b0001006374696c666f00001c00028018000300020000000000001b00000000749aee660000fa00040006009206cda50e03cb34d6673d2704712483fe87dd66833c274ad49800b47f849aab4ee8c92622a68e519e586ae2a262336513d9618ebe7d947408e2ee6cf2"], 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 00:14:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x11, 0x0, 0x0) [ 588.532763][T12317] tipc: TX() has been purged, node left! 00:14:13 executing program 4: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x89e0, &(0x7f0000000100)) [ 588.617302][T12317] tipc: TX() has been purged, node left! [ 588.626053][T12317] tipc: TX() has been purged, node left! 00:14:14 executing program 5: unshare(0x40000000) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x29}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x3, 0x0, "f3ead8d0cdcbb2f5c1806cdb6b73f464783f8299fbcbdb06d1d5edcba4e821fd22a327bfd5560269c70b81f801bedb7942ffb681d80921cc74aeae5fd231b429222b1dc2c7a9b5cbf6b54ecde5a2a8a8"}, 0xd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008400000007470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRESHEX, @ANYBLOB="5e9dddaf243f5712336c7b52723a207bef1ded355a6fa7ad979926f2ecdef3deb3616584b3c2b0cf4db2d85531e05b979fe8a5b671089b0b2cfb06982afca32711ef746e08ab973ad17d417c53ff948cb3c1d18c79893eed2f8a7cc060ee81b18844e399ac2903be7ade3beb954096140008000000000000a99f5a65959556a541c1f13386d9cae96f38bcb16d0dc85c67e6d7cf6b3f59d6f93ec98bae1f0d888f8cf3b225b6aede4e153998ba27dc6b69e501"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e1c36e4858"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x11) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="00a69217", @ANYRESHEX=r0], 0x4}}, 0x0) close(r0) 00:14:14 executing program 3: unshare(0x40000000) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x29}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x3, 0x0, "f3ead8d0cdcbb2f5c1806cdb6b73f464783f8299fbcbdb06d1d5edcba4e821fd22a327bfd5560269c70b81f801bedb7942ffb681d80921cc74aeae5fd231b429222b1dc2c7a9b5cbf6b54ecde5a2a8a8"}, 0xd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008400000007470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRESHEX, @ANYBLOB="5e9dddaf243f5712336c7b52723a207bef1ded355a6fa7ad979926f2ecdef3deb3616584b3c2b0cf4db2d85531e05b979fe8a5b671089b0b2cfb06982afca32711ef746e08ab973ad17d417c53ff948cb3c1d18c79893eed2f8a7cc060ee81b18844e399ac2903be7ade3beb954096140008000000000000a99f5a65959556a541c1f13386d9cae96f38bcb16d0dc85c67e6d7cf6b3f59d6f93ec98bae1f0d888f8cf3b225b6aede4e153998ba27dc6b69e501"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e1c36e4858"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x11) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="00a69217", @ANYRESHEX=r0], 0x4}}, 0x0) close(r0) 00:14:14 executing program 1: unshare(0x40000000) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x29}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x3, 0x0, "f3ead8d0cdcbb2f5c1806cdb6b73f464783f8299fbcbdb06d1d5edcba4e821fd22a327bfd5560269c70b81f801bedb7942ffb681d80921cc74aeae5fd231b429222b1dc2c7a9b5cbf6b54ecde5a2a8a8"}, 0xd8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008400000007470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRESHEX, @ANYBLOB="5e9dddaf243f5712336c7b52723a207bef1ded355a6fa7ad979926f2ecdef3deb3616584b3c2b0cf4db2d85531e05b979fe8a5b671089b0b2cfb06982afca32711ef746e08ab973ad17d417c53ff948cb3c1d18c79893eed2f8a7cc060ee81b18844e399ac2903be7ade3beb954096140008000000000000a99f5a65959556a541c1f13386d9cae96f38bcb16d0dc85c67e6d7cf6b3f59d6f93ec98bae1f0d888f8cf3b225b6aede4e153998ba27dc6b69e501"], 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e1c36e4858"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x11) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="00a69217", @ANYRESHEX=r0], 0x4}}, 0x0) close(r0) [ 589.474921][T13299] IPVS: ftp: loaded support on port[0] = 21 [ 589.617461][T13303] IPVS: ftp: loaded support on port[0] = 21 [ 589.758911][T13326] IPVS: ftp: loaded support on port[0] = 21 [ 590.378720][ T8715] Bluetooth: hci3: command 0x0406 tx timeout 00:14:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x20}}, 0x0) 00:14:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x10000ab00) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000400), 0x10000ab00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000200)="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", 0x200, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @empty}, &(0x7f00000000c0)=0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 00:14:15 executing program 5: bind$isdn_base(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:14:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x200, 0x18c, 0x200, 0x200, 0x0, 0x318, 0x2e0, 0x2e0, 0x318, 0x2e0, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0xff}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "c64f9e9a0ce7ff9050962ec8bfdc7d102070f4e5a26554780efa3db5d7abb17d08fe7913053504fcf3bc1d76b356acd77c2131ca620e3d69e70e05704fd15dd3"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 00:14:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x203, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x4e, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000037c0)=@assoc_value={r4, 0x3000}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0xffffff64}, 0x8) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xcd398530) 00:14:15 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xac7, 0x5}, 0xc) 00:14:16 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="fbb70b617839e9a98b7e1f2c7e1743ba005d9b43d2dca76ecedb18dbf76aa12460934e341b8ad8d19606c1451c74852200dd14b2b9447ca281f4b4e830522cbea5ce26c9940998a71fdbc03f4109b6513b6a03a1730d3b1236ef124cf6b8e1c55e70b78062fba7e967ccd3622661ea989218bac1c8007403067152ab95a6cbc889", 0x81}], 0x1}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f0000000240), 0x0}, 0x20) 00:14:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xe2d}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:14:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 00:14:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x203, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x4e, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000037c0)=@assoc_value={r4, 0x3000}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0xffffff64}, 0x8) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xcd398530) 00:14:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) socketpair(0x15, 0x800, 0xadca, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0xc}, {0x8}}]}, 0x20}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x0, 'vxcan1\x00', {}, 0x3}) sendto$inet(r4, &(0x7f0000000200)="1655b2aeac9d0c7db6c78e5929e88358d5", 0x11, 0x0, 0x0, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "c2c7df04869f598a", "a6f6f394c9e6385d834c0f60d01f5ed3c0c21dc707ae3288277f2041e8df2332", "1fe24280", "58e5d93016e853cd"}, 0x38) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 00:14:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000008200)=@newtaction={0x64, 0x30, 0x3f9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 593.430761][T13410] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 593.439439][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:14:18 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) [ 593.593985][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 593.754345][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 593.972504][T12317] tipc: TX() has been purged, node left! [ 594.045289][T12317] tipc: TX() has been purged, node left! [ 594.128889][T12317] tipc: TX() has been purged, node left! [ 594.232033][T12317] tipc: TX() has been purged, node left! 00:14:19 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) 00:14:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000013c0)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x2000c8c5) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:14:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 00:14:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000008200)=@newtaction={0x64, 0x30, 0x3f9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 00:14:19 executing program 1: socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000ecffffffffffffff", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000000740)="a22004bfb4eebbfbb93441e96681fda5088831a99a36219c276398eced80dac590717df37af51fc611829d30f7d04951caf62ecc35e627782c38bdaf3da44f7780da0cbc", 0x44}, {&(0x7f00000007c0)="8634be2bd00e3b700ea4017e5d2447f826dada11a0acf97ea1c4feade4a5b987705be2d61286430c392415e7646ffe959bc8ce10ae67e503e8ea6a9655d3911b5c82ab166a436ae5fb46b2e8d203808c862b27efe7d48da19b99ddb78708ea0a7a192dbdbfb64a075b8fd88e8aea219afa3ffe5d4e0925262efcb88341da18ec4556e1b524ac5ea48bde9d14372a75b5ae411270bfcf100bbf0296bc821d41f700e7b7f46a4a8959150c5dcf5324e5e333c0", 0xb2}, {&(0x7f0000000880)="488620d4475674612c6b2d015bc661acf7db0f4f79047f4cd46cc1e074606d1d108b2446f73e1dc25d993718ba37f89a72ba10fb4ad1e24060a406d98a03b56a62e735ca850dbebd5353eb4faf17c48b87956d90c40e80da4a9790eb7c6f2fc81223065121419bff56", 0x69}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="aa366f0621c10347d84fcb59bbf5c009b43a7cfa33242adb50c3405d3621b85d827cb9f2e8", 0x25}, {&(0x7f0000002940)="3f2c15808ecffe5b05ae0473e0912a3159e9c47c68ce0a0cfde2640d4a76e1bad01d8cf3ca535d9128c16913a0af6037d71339eb49853013c42dbbebbd16816fb44c1f1603eac03918a4c4398c5cc9c3a720afc083b4edac5db80561d2229e1c83c52483c04f1838d7cea6df78e934fc59903b8cd6ce614a5a4b695d4a35170805fb5d8614dcbd0f63cbcfa66ce0ae4aa3fe1bf49864e0e8273663bef6b0d6475dc0a7315511ca4965b41719b0647ad124fa53fe32fb1a813bd259d4b98610e3bc3514", 0xc3}, {&(0x7f0000002a40)="c2b538037bb40e8391d12acb84a7d69a4c7a8a4a39fdea93f1a1081ffed803281bf82ae303fe41299cc23cc5ed8e7653a2616a02a3c6b0742e6f3b7085ffa2632738a3634d1922d0e712ce7235062e32e8faa738610893c5916d8becf7f540ed699e522548702af860ecdd725d6d11d8", 0x70}, {&(0x7f0000002ac0)="17fee88b506ccfd877df274b13d6ee3a16fe6f52e9606ef0c6e9f59da6e6b90e355fa3cb08470391147cf94513a11e62cdfc26e2ae81af95ba6bda7dcf89a8e8714ce6ae6346d113e8f10d9070c42e82360964bc75e9b19f684e62df4d05b9f10c8d927ff030be6cd77a36fd3488c8a718bd71da2dd0cff2cda21d828f1eaa2bbba997b1b87a422afe4ebfad4c675ba4866a64eb2b5ccd62140107f9a893faae09cb993ae04d33d1637f435f3f32db2b5e4b95f1c0783f202ca1e59342b7", 0xbe}, {&(0x7f0000002b80)="dfd2b2f7257e6badd44e23f3040d634757b2b04d3453203f4ca50949dfaed33aa74f31df27b5747c33714b0b3d22c84d6706011516271ecc5c76c1f31314d4c12b6a312e40383ba8cb1863d1e1f8d43b12320cb52cbd9318d415480471596af309e6f365ad9f9a064678c59b01eb6812a84035f639a0ec5691e5c750209f00c6da469dc46952cd22ad362dda60b1695284ec960e9a1de44dd43a93c084885b3d22c67b3e", 0xa4}], 0xa, &(0x7f0000002d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x78, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r9, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}}, 0x0) openat$cgroup_int(r6, &(0x7f0000000240)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00<', @ANYRES16=r9, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000c024) 00:14:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x2, 0x9, 0x85, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 595.116459][T13429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 595.177012][T13439] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 595.245794][T13444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12604 sclass=netlink_route_socket pid=13444 comm=syz-executor.1 [ 595.330425][T13445] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:14:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 595.512262][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 595.546341][T13447] IPVS: ftp: loaded support on port[0] = 21 00:14:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 00:14:20 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) [ 595.604532][T13429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12604 sclass=netlink_route_socket pid=13429 comm=syz-executor.1 00:14:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x21b, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a01140060024003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801610002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4021, 0x0, 0x23f) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:14:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001540)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001600)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d40646857b851b65a7a918c58881be75d5d71239c7698d7bdb3f879f49436bbbd875865534079d0397d48842098442400126f8703d", 0xeb}, {&(0x7f0000000000)="0c06251f00000000461ace70236fa0348db1147c2390dbe06de04e35eb0265000000", 0x22}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd50efbce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7220ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34cde929e63045684f83aae6d36aeb6430fcb2939da257013f355311245f449afac154a6576a3d7f5591f30021d273f", 0x9d}, {&(0x7f0000000300)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a5ea3ae461b9018b039a4f69e2fdb082765b01000000d10caad94fd56acc522d8ccc79457da8b9fd8a3c83e184d7ec12809c5ee6b6e151ac4607a4f00b038bb363c37a615b632f43ca51be02ce3be3138bd063ec7f79ab187f2914be3da266a334e66594fa7c6f7b1f92b12fa39d9e", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000002780)="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", 0x110}], 0x1}}], 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 596.082586][T13468] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 596.097528][T13468] team0: Device ipvlan1 failed to register rx_handler [ 596.147273][T13475] IPVS: ftp: loaded support on port[0] = 21 [ 596.172611][T13476] IPVS: ftp: loaded support on port[0] = 21 00:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80300000100000000122e25d386dd", 0x0, 0x403, 0xe00, 0x22d}, 0x28) [ 598.163899][T13447] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 598.182496][T13447] device ipvlan0 entered promiscuous mode [ 598.362735][T13449] IPVS: ftp: loaded support on port[0] = 21 [ 598.779195][T13475] IPVS: ftp: loaded support on port[0] = 21 [ 598.862382][T13477] IPVS: ftp: loaded support on port[0] = 21 00:14:24 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a2000000000"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000005) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0, 0x0, 0x92}, {0x0, 0x3, 0x0, 0x6}, {0x6c98, 0x0, 0x8, 0x1ff}, {0x0, 0x0, 0x0, 0x2}]}) 00:14:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000d, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x20000054}}, 0x0) 00:14:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 00:14:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") unshare(0x2a000400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x82, &(0x7f0000000040)={r3}, 0x8) 00:14:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)="e8", 0x7ffff000}], 0x1}}], 0x1, 0x0) [ 600.498035][ T28] audit: type=1804 audit(1599437665.440:61): pid=13628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers" dev="sda1" ino=16312 res=1 [ 600.685818][ T28] audit: type=1804 audit(1599437665.480:62): pid=13628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers" dev="sda1" ino=16312 res=1 00:14:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x37, &(0x7f00000001c0)={&(0x7f0000000080)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x8, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b081b609ad942d72742bd7734c86a4a9580e2974416c576a0ed1c5b6dda8e3c410700292993869af48fb4b4067012626a151f069bcadb58fb74cb5ab1655c056"}}, 0x48}, 0x300}, 0x0) [ 600.750104][T13628] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 600.762087][T13628] File: /root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers PID: 13628 Comm: syz-executor.4 [ 600.775920][T13630] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 600.788207][T13630] File: /root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers PID: 13630 Comm: syz-executor.4 [ 600.881351][T12317] tipc: TX() has been purged, node left! [ 600.894131][T12317] tipc: TX() has been purged, node left! [ 600.934427][T12317] tipc: TX() has been purged, node left! [ 600.983349][T12317] tipc: TX() has been purged, node left! [ 601.001032][ T28] audit: type=1800 audit(1599437665.810:63): pid=13632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=16308 res=0 00:14:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9, 0x48}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 601.022476][ T28] audit: type=1804 audit(1599437665.910:64): pid=13631 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers" dev="sda1" ino=16312 res=1 [ 601.052962][ T28] audit: type=1804 audit(1599437665.910:65): pid=13628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers" dev="sda1" ino=16312 res=1 [ 601.107532][T12317] tipc: TX() has been purged, node left! 00:14:26 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="900000001c001f4d154a817393278bff0a808f78020000006c36710014000100ac1414bb0542d6401051a2d708f37ac8da1a29760099c5ac0000c5b068d0bf47d3234565778d8757006113ffaf6c3efed495a46215be0000766426c0c80cef41d7891664969270b6507022d28581d158ba86c9d2896c342a033a0000000b001500de1df32c1739d7fbee9aa2417318e9", 0x90, 0x0, 0x0, 0x0) [ 601.188652][ T28] audit: type=1804 audit(1599437666.030:66): pid=13630 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/54/cgroup.controllers" dev="sda1" ino=16312 res=1 00:14:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x1, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) 00:14:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000140)=0xfffffffffffffff2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x4, 0x3f, 0x1, 0x0, 0x290134be4c699de, @dev={0xfe, 0x80, [], 0x21}, @dev={0xfe, 0x80, [], 0x18}, 0x7, 0x700, 0x72b54558, 0x3ff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="22ef754ee93bf19daf4ece94e888ffc7f2920de7dd9cf79c7771bf4d8cb54fb6b4e5c5a76c6f793a32acefef31fa688aa3cb", @ANYRES16=0x0, @ANYBLOB="20002bbd7004fedbdf25040000002c0001801400020076657468315f766972745f776966690014000200626f6e645f736c6176655f310000000014000180080003000200004008000300030000000c0001800800010030fb0ace4a311d16d1ccc1e9b0b09938559b52e5f86f72de70da09fd847917a88d3d1d9c5145b43230d572778f46391e40e9590406917cfda42d9b939d3934", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="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"/337, @ANYRES32=r5, @ANYBLOB="0c000180080003000000000014000180080003000300000008000100", @ANYBLOB="30000180080003000200000014000200626f6e645f736c6176655f310000000008000300020000000800030002000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0xd980a8883fc4a2ab) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 601.555931][T13641] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 601.606094][T13644] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6) pipe(0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fba, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:14:26 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfba1133f8fc07f7f, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x84) [ 601.814753][T13646] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:14:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:14:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") unshare(0xc000400) r1 = socket(0x11, 0x80002, 0x0) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 00:14:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x7f, 0x8, 0x75, @mcast1, @empty, 0x8000, 0x8000, 0x8, 0x602}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r5, 0x2f, 0x6, 0x9b, 0x1, 0x0, @private1, @mcast1, 0x1, 0x7800, 0x800, 0x20}}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x64, r2, 0x536ae464467e3e0b, 0x0, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x64}, 0x1, 0x6000000000000000}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:14:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x896d9}]}, &(0x7f0000000780)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x705, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x440}}, 0x20}, 0x1, 0x0, 0x0, 0x200048d1}, 0x4040001) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)={0x64, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0xffffffffffffff50) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000004c0)={0x2, 0xc4, "dcce7dcb42270bc6560ab863d3d627cf40da7e34f9978195578017189ac11cfeb64f18e29afb5ab2bb6872ebc391081fabef7e8ca715078bad7c5ad71ad3db23a47935be351e6e1b68bb02a39e81f2b31aa620773e22a5b3b38d7aed8525d53551e633bd05dad3b7b84c4253600f5563e71f9237366d2e6b3131dc4880f4acddec09391ff115c1daeb2cbe03df9b726b3380c204c6c9db6418fc597d0302e7107297a6d6dc5825bd8c0f708c24616ad4b75b7715efe7cfa103370cbfb3cdd602686bc41d"}) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x4000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23151}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 00:14:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000019c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x10, 0x0, 0x0) [ 604.061342][T13687] device macvtap1 entered promiscuous mode [ 604.067786][T13687] device virt_wifi0 entered promiscuous mode [ 604.185817][T13687] device virt_wifi0 left promiscuous mode [ 606.427995][T12317] tipc: TX() has been purged, node left! 00:14:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:14:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x240, 0x240, 0x240, 0x0, 0x240, 0x438, 0x438, 0x438, 0x438, 0x438, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'veth1_virt_wifi\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x94}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 00:14:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) 00:14:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='devices.list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x20, r5, 0x703, 0x0, 0x0, {0x7, 0x7}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x53f46e5b83372eff}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x22, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x20044855) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 00:14:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x70, &(0x7f0000001280)=""/4098, &(0x7f0000000040)=0x1002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 00:14:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d40000001000390e0000000000dfff0000000000", @ANYRES32=0x0, @ANYBLOB="030000050000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000030000060003003f000000060011004e2c690005001600020000000500170000000000050008000000000008000600ac141419"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x3200) [ 607.865115][T13727] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.002195][ T28] audit: type=1804 audit(1599437672.941:67): pid=13729 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/57/cgroup.controllers" dev="sda1" ino=16331 res=1 00:14:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0200002e00050bd25a80648c63940d0624fc60100002400a000200091a82c137153e67040201800b000000d1bd", 0x33fe0}], 0x1}, 0xe000000) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, &(0x7f00000001c0)) 00:14:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) [ 608.582811][T13728] device bridge_slave_0 left promiscuous mode [ 608.590568][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.737989][T13747] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:33 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000c1ffffffffffff0180c2000000810000008847"], 0x18) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 00:14:34 executing program 2: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet6_dccp(0xa, 0x6, 0x0) pipe(&(0x7f0000000100)) socket(0x2, 0xa, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfd9, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xad}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xffffffff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x80}}, 0x0) 00:14:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) 00:14:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0xa, 0x1d, 0x400, 0x9}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 609.737168][T13764] device vlan2 entered promiscuous mode [ 609.742838][T13764] device bond0 entered promiscuous mode [ 609.749927][T13764] device bond_slave_0 entered promiscuous mode [ 609.756854][T13764] device bond_slave_1 entered promiscuous mode [ 609.769342][T13764] bond0: (slave vlan2): slave is up - this may be due to an out of date ifenslave [ 610.001316][T13764] device bond0 left promiscuous mode [ 610.007185][T13764] device bond_slave_0 left promiscuous mode [ 610.013737][T13764] device bond_slave_1 left promiscuous mode 00:14:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0xe99, 0x4) writev(r2, &(0x7f0000003280)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 00:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) 00:14:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001340)='~', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x1, 0x0, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8004) socket$inet_udplite(0x2, 0x2, 0x88) 00:14:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) [ 610.823811][ T28] audit: type=1800 audit(1599437675.761:68): pid=13782 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=16335 res=0 00:14:35 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x15d4b87) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 00:14:35 executing program 4: unshare(0x40000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x22c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff967c}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff7d}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @remote, 0x1380}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf2, @local, 0x7}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72b91627}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6c89}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x40001d0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r3 = socket(0x10, 0x80002, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) [ 611.433863][ T28] audit: type=1400 audit(1599437676.371:69): avc: denied { name_bind } for pid=13794 comm="syz-executor.0" src=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 611.456624][ T28] audit: type=1400 audit(1599437676.371:70): avc: denied { node_bind } for pid=13794 comm="syz-executor.0" src=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 611.471278][T13797] IPVS: ftp: loaded support on port[0] = 21 00:14:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) [ 611.709862][T13776] device vlan2 entered promiscuous mode [ 611.715705][T13776] device bond0 entered promiscuous mode [ 611.721320][T13776] device bond_slave_0 entered promiscuous mode [ 611.728754][T13776] device bond_slave_1 entered promiscuous mode [ 611.742139][T13776] bond0: (slave vlan2): slave is up - this may be due to an out of date ifenslave [ 611.973350][T13776] device bond0 left promiscuous mode [ 611.980247][T13776] device bond_slave_0 left promiscuous mode [ 611.987752][T13776] device bond_slave_1 left promiscuous mode 00:14:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) [ 612.265295][T13804] IPVS: ftp: loaded support on port[0] = 21 [ 612.364171][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xdda, 0x4) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 00:14:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) accept4(r1, 0x0, &(0x7f0000002380), 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, 0x0, 0x6) accept4(r2, 0x0, &(0x7f0000002380), 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x280, 0x6, 0x0, 0x8, 0x4}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x20}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000a13) 00:14:37 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x800, @loopback, 0x4}}, 0x0, 0x0, 0x5a9d}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendto$rose(0xffffffffffffffff, &(0x7f0000000340)="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", 0x1ac, 0x4, &(0x7f0000000300)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'TPROXY\x00'}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 00:14:37 executing program 3: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(0xffffffffffffffff) 00:14:37 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000440)=0x401, 0x4) ioctl(0xffffffffffffffff, 0x80000001, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x9}, 0x8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x58, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x2b6b}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xf5ad}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf4f9808b203a49c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0xc800) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a34000000080a05000000000000000000070000040c00064000000000000000040900020073797a3200000000080009400000000030000000160a010100000000000000000b0000040800074000000001c9fe05400000000000000005080007400000000020000000120a01020000000700000000000000030c0006400000000000000003140000001100010000000000000000000000000aa9889e2ef35734e3ae898011bc775b370176e96ce69b0e3f0f9472f2e8ae7af73404e0b1505785db9ec3ebdbc6e057390ef07d4ce48b5162b98e3a3e6c9f"], 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x13dd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) [ 613.081174][ T28] audit: type=1804 audit(1599437678.022:71): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 [ 613.107007][ T28] audit: type=1800 audit(1599437678.022:72): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16331 res=0 [ 613.129702][ T28] audit: type=1804 audit(1599437678.022:73): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 [ 613.163182][ T28] audit: type=1804 audit(1599437678.052:74): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 [ 613.190886][ T28] audit: type=1804 audit(1599437678.112:75): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 00:14:38 executing program 3: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(0xffffffffffffffff) [ 613.548791][T13835] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 00:14:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000000) [ 613.648218][T13837] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 613.666284][T13837] device gretap0 entered promiscuous mode [ 613.672779][T13837] device macvlan2 entered promiscuous mode 00:14:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x0, 0xb, 0x1, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x4}]}, 0x18}}, 0x0) [ 614.194475][T13835] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 614.230114][ T28] audit: type=1800 audit(1599437678.192:76): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16331 res=0 [ 614.252424][ T28] audit: type=1804 audit(1599437678.192:77): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 [ 614.278352][ T28] audit: type=1804 audit(1599437678.202:78): pid=13826 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 [ 614.305873][ T28] audit: type=1804 audit(1599437678.212:79): pid=13825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir245012423/syzkaller.0M5ubS/110/memory.events" dev="sda1" ino=16331 res=1 00:14:39 executing program 3: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(0xffffffffffffffff) [ 615.579883][T10171] Bluetooth: hci4: command 0x0406 tx timeout 00:14:40 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001c0007"], 0x1}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0x86, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r5}, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 00:14:40 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [0x0, 0xff], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) 00:14:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="7cbe8eb3", @ANYRES16, @ANYBLOB="00022cbd70000000000015000000001f0000b0256ad700090000001c0007804800020001000080080002000400000000000002"], 0x44}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 00:14:40 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x4, 0x400000, 0x4) 00:14:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) [ 615.874859][T13853] not chained 30000 origins [ 615.879431][T13853] CPU: 0 PID: 13853 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 615.889688][T13853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.900626][T13853] Call Trace: [ 615.905788][T13853] dump_stack+0x21c/0x280 [ 615.910145][T13853] kmsan_internal_chain_origin+0x6f/0x130 [ 615.916496][T13853] ? kmsan_internal_chain_origin+0xad/0x130 [ 615.922408][T13853] ? kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 615.928598][T13853] ? kmsan_memcpy_metadata+0xb/0x10 [ 615.934161][T13853] ? __msan_memcpy+0x43/0x50 [ 615.938803][T13853] ? ____sys_sendmsg+0xe58/0x1240 [ 615.943846][T13853] ? __sys_sendmmsg+0x808/0xf70 [ 615.948714][T13853] ? __se_compat_sys_sendmmsg+0xcd/0xf0 [ 615.954316][T13853] ? __ia32_compat_sys_sendmmsg+0x56/0x70 [ 615.960070][T13853] ? __do_fast_syscall_32+0x2af/0x480 [ 615.965471][T13853] ? do_fast_syscall_32+0x6b/0xd0 [ 615.970541][T13853] ? do_SYSENTER_32+0x73/0x90 [ 615.975363][T13853] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.981908][T13853] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 615.987749][T13853] ? kmsan_get_metadata+0x116/0x180 [ 615.992982][T13853] ? kmsan_set_origin_checked+0x95/0xf0 [ 615.998552][T13853] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 616.004728][T13853] ? _copy_from_user+0x201/0x310 [ 616.009672][T13853] ? kmsan_get_metadata+0x116/0x180 [ 616.015825][T13853] __msan_chain_origin+0x50/0x90 [ 616.020780][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.025911][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.030854][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.035567][T13853] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 616.041473][T13853] ? __msan_poison_alloca+0xf0/0x120 [ 616.046795][T13853] ? put_old_timespec32+0x231/0x2d0 [ 616.052170][T13853] ? kmsan_get_metadata+0x116/0x180 [ 616.057369][T13853] ? kmsan_get_metadata+0x116/0x180 [ 616.063865][T13853] ? kmsan_get_metadata+0x116/0x180 [ 616.069155][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.074547][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.080086][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.085298][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.090150][T13853] do_SYSENTER_32+0x73/0x90 [ 616.094646][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.100959][T13853] RIP: 0023:0xf7f63549 [ 616.105800][T13853] Code: Bad RIP value. [ 616.109852][T13853] RSP: 002b:00000000f551b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 616.120711][T13853] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020004d80 [ 616.128871][T13853] RDX: 0000000000000237 RSI: 0000000004000000 RDI: 0000000000000000 [ 616.136833][T13853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.144809][T13853] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 616.152857][T13853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.160836][T13853] Uninit was stored to memory at: [ 616.165873][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.172629][T13853] __msan_chain_origin+0x50/0x90 [ 616.177559][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.184953][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.190193][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.194899][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.200384][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.206218][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.211433][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.216380][T13853] do_SYSENTER_32+0x73/0x90 [ 616.220885][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.227333][T13853] [ 616.229748][T13853] Uninit was stored to memory at: [ 616.235166][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.240966][T13853] __msan_chain_origin+0x50/0x90 [ 616.245903][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.251015][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.255942][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.260609][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.265992][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.271526][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.276715][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.281676][T13853] do_SYSENTER_32+0x73/0x90 [ 616.286282][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.292700][T13853] [ 616.295106][T13853] Uninit was stored to memory at: [ 616.300140][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.305876][T13853] __msan_chain_origin+0x50/0x90 [ 616.310807][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.315905][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.320829][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.325519][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.330878][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.336501][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.341714][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.346554][T13853] do_SYSENTER_32+0x73/0x90 [ 616.351047][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.357369][T13853] [ 616.359681][T13853] Uninit was stored to memory at: [ 616.365739][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.371623][T13853] __msan_chain_origin+0x50/0x90 [ 616.376559][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.381746][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.386672][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.391340][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.396799][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.402338][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.407529][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.412386][T13853] do_SYSENTER_32+0x73/0x90 [ 616.416880][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.423619][T13853] [ 616.425932][T13853] Uninit was stored to memory at: [ 616.431472][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.437458][T13853] __msan_chain_origin+0x50/0x90 [ 616.442386][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.447484][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.452583][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.457253][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.463135][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.468670][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.473860][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.478706][T13853] do_SYSENTER_32+0x73/0x90 [ 616.483203][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.489519][T13853] [ 616.492277][T13853] Uninit was stored to memory at: [ 616.498270][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.504075][T13853] __msan_chain_origin+0x50/0x90 [ 616.509181][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.515338][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.520265][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.525281][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.530826][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.536467][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.541657][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.546499][T13853] do_SYSENTER_32+0x73/0x90 [ 616.551083][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.557476][T13853] [ 616.559791][T13853] Uninit was stored to memory at: [ 616.564822][T13853] kmsan_internal_chain_origin+0xad/0x130 [ 616.570534][T13853] __msan_chain_origin+0x50/0x90 [ 616.575551][T13853] __get_compat_msghdr+0x6db/0x9d0 [ 616.580663][T13853] get_compat_msghdr+0x108/0x2b0 [ 616.585590][T13853] __sys_sendmmsg+0x755/0xf70 [ 616.590260][T13853] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 616.595623][T13853] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 616.601176][T13853] __do_fast_syscall_32+0x2af/0x480 [ 616.606366][T13853] do_fast_syscall_32+0x6b/0xd0 [ 616.611205][T13853] do_SYSENTER_32+0x73/0x90 [ 616.615700][T13853] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 616.622007][T13853] 00:14:40 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e3103"], 0xa) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r7, 0xb03, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={0x0}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x34, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178adf9bf940d1c5d8a0cb9a7f831c6c08", 0x7e}, {&(0x7f0000000340)="ce74df4ce753e3a3903067a7d94349b6b1347bf3272cd435ac842c69508589138f6023a115f1f5511e098e09abf6254ed4b45bc315de14", 0x37}, {&(0x7f0000000580)="e1df12a6ff5af568298ef90aad4247fb955895afbdd97be32463f9bc6583f4b420c83ea8cf6fb2879eb731d0e78d04a5f71a6056e158b01cdbff2bf6ba985f2f14c862ceb34a6a39493181636dab3099b834347d27fe16e93bb3c1c219af8d96568411255bb5d6462902ec4139c021fedf9196ca75bf8eecb7757731f273429c1ba2adbf6c34cd", 0x87}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3a6b7253486ed8d1a43", 0x90}, {&(0x7f0000000700)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d555c4fd53af749d688147a5ca82981fceac765394273b04059a40e3df721109469c238556c9fce8898f421aac66397da6a3bae34e0095b740d7870f94921dbe1bb5674a856624e73cdf1710ebc643bcdcdc6089790846ddfa2483766d17a3b4a1db2342365dbd4c8c78e0a68a9b9a81bd576db6de52d667dfaeae220cbbb5a0e6aeec6809524b7080", 0xcb}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x8) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 616.624329][T13853] Local variable ----msg_sys@__sys_sendmmsg created at: [ 616.631267][T13853] __sys_sendmmsg+0xbb/0xf70 [ 616.635845][T13853] __sys_sendmmsg+0xbb/0xf70 [ 616.799113][T13866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 616.920855][T13869] bond1: (slave veth9): Enslaving as an active interface with an up link [ 616.986576][T13869] bond1 (unregistering): (slave veth9): Releasing backup interface 00:14:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 617.107060][ T28] audit: type=1804 audit(1599437682.052:80): pid=13911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184401749/syzkaller.FfDlM5/121/memory.events" dev="sda1" ino=16370 res=1 00:14:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) [ 617.459022][T13869] bond1 (unregistering): Released all slaves [ 617.805401][T13903] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:14:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) 00:14:43 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "afa1a8", 0x0, 0x67, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}, 0x0) 00:14:43 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ca65c0ea44605ab5bfe81ae09ecb69958a5056164b70ee29", "f6011458491eca02e2fcb6cb8d534d9f993b95c8a4367042baa240b3bed9c79b"}}}}}}, 0x0) 00:14:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x6) r3 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x40, 0x7f}) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0xb0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004080}, 0x8884) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6874e56cbabfc45a, 0x28011, r0, 0x0) 00:14:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004080)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1, &(0x7f0000000540)=[@prinfo={0x18}], 0x18}], 0x1, 0x48054) 00:14:43 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8}]}}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:14:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) 00:14:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)=ANY=[], 0x8) 00:14:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) 00:14:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:14:44 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000000a80)) 00:14:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)="80", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x9c) 00:14:44 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) [ 619.541098][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000023c0)={0x1, 'vlan1\x00', 0x2}, 0x18) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="7b65637572697479000000000000000000000000000000000000000000000000e30000000650d0f771cd8eca3740d6d6ee29680e40368b68bd2ac0b702a208ed0ef6f281b10e944688f295a405a9b563491aac0b628ce4db1cfad26602f82023278041f2a7e262c2fde82787629006aa687469752a78291cb02d5de133cf34a69003516a31308cf9b67335bf56e6080db62547836d39cb7263230a21351421b1f6977a0bde478367291d3e4d1505540900000000000000f883f1f7efd9864d6d9c2a4783a494c683a322af97adaff895f6385c000000000000000116521f2bf0329e4b763e363a2db8c87b8740cdd51f313f79305b13ea6500"/258], &(0x7f0000000000)=0x107) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x1f, 0x800, 0x8) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f00000003c0)=""/4096, &(0x7f0000000240)=0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000001440)={0x3f, 0xff, 0x40, 0x8, 0x9, 0x1, 0xd8, 0x1, 0x5, 0x0, 0xfe, 0x1, 0x1, 0x5}, 0xe) ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000100)={0x100008003, 0x40000000, 0x2be20000}) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r3, 0x0, 0xf03b0000) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000180)=""/106) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000013c0)={0x8, [0x6, 0x5, 0x2, 0x20fb, 0x1, 0x6, 0xf6f, 0x5]}, &(0x7f0000001400)=0x14) socket$inet6(0xa, 0x0, 0x0) 00:14:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(r0) [ 619.729149][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:44 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000140)) 00:14:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:14:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/2372], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x7300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:14:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x1a0, 0x7, 0x178, 0xc7, 0x178, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xa2]}, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 620.188856][T14016] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 2, id = 0 [ 620.318882][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:45 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x9, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:14:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 00:14:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400002c000505d25a80648c69940d0124fc60100003400a000048053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) [ 620.671584][T14029] [ 620.674138][T14029] ********************************************************** [ 620.682479][T14029] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 620.692807][T14029] ** ** [ 620.700992][T14029] ** trace_printk() being used. Allocating extra memory. ** [ 620.709517][T14029] ** ** [ 620.717225][T14029] ** This means that this is a DEBUG kernel and it is ** [ 620.726591][T14029] ** unsafe for production use. ** [ 620.734377][T14029] ** ** [ 620.742229][T14029] ** If you see this message and you are not debugging ** [ 620.750445][T14029] ** the kernel, report this immediately to your vendor! ** [ 620.758283][T14029] ** ** [ 620.766014][T14029] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 620.774159][T14029] ********************************************************** 00:14:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) socket$inet(0x2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x14c}, 0x3f00) [ 621.166090][T14041] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 621.174409][T14041] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 621.183785][T14041] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:46 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaabaa8100000086dd60"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:14:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @identifier="05d5a1543cc25ddd39944ab92215157c"}}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8, 0x1f, r1}]}, 0xc0}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000003c0)=""/151, 0x97}], 0x4, &(0x7f00000004c0)=""/59, 0x3b}, 0x12000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0xc0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="24000000150007031dfffd946fa2830002200a0009000000741d8568201ba3a20400ff7e280000002600ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) 00:14:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 00:14:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef24080000000a9386dd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:14:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "0000000001cb7daf01fe7a68"}, 0x10) 00:14:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 00:14:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x8) 00:14:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000100)={0x0, 0x8, [], &(0x7f0000000080)=[0x0]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x40000, 0x0}}], 0x5dd, 0x40012062, 0x0) 00:14:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) close(r0) [ 622.779316][T14079] IPVS: ftp: loaded support on port[0] = 21 00:14:47 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x6b) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}}, 0x0) 00:14:47 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000300)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 00:14:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0xfffffffffffffffe) [ 623.508148][T14081] IPVS: ftp: loaded support on port[0] = 21 00:14:48 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000020000000b000100666c6f77657200002c00020014001f00fe88000000000000000000000000000114002000000000000000000000000000e7e1e6f6df4f792a31c9ad2bbcb24045fcdbfe894a4a2a6ba4c221198becaa003c1953dff33568914d7f1395c95866909dc0e10c3ef5d73bc41ffa3198c1d6c6e9ca7d3998be97ef8b0aaa0000006a1b58d65ca6d7230615f1"], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:14:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) close(r0) [ 623.722496][ T8717] tipc: TX() has been purged, node left! 00:14:48 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)="02", 0x1}], 0x1}, 0x40) 00:14:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000180)=""/142, 0x2d, 0x8e, 0x1}, 0x20) 00:14:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r2, 0xd9b5f1a1c3ebb627}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="080028bd7000fddbdf2503000000080004000b00000008000200ff0100001400040006000000f7ffffff2c0600000900000014000100fe8000000000000000000000000000bb0500060002000000080003000500000014000100ff0100000000000000000000000000011400010000000000000000000000ffffac1414bb05000500030000000500050001000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x4}, 0x2c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x100000001) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) accept4$unix(r7, &(0x7f0000000040), &(0x7f0000000100)=0x6e, 0x1000) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_eee={0x44}}) accept4$phonet_pipe(r8, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) 00:14:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) close(r0) 00:14:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 00:14:49 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000100)={0x0, 0x8, [], &(0x7f0000000080)=[0x0]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socket(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x40000, 0x0}}], 0x5dd, 0x40012062, 0x0) 00:14:49 executing program 4: r0 = socket(0x1f, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x34, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"/381, @ANYRESDEC, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0xc32afaf580f22372}, 0x4000011) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vxcan1\x00', {'batadv0\x00'}, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x998) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000700)="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", 0x78d}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) 00:14:49 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f0ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:14:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x0) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6cb4772061b9f8ff0000000000000027a59f0f9fe0bf010ad7fa7e5542c692928161cdc3f436e331d788077b50e6af67b86f1c20c8cc92ff2fca0656473757ba19ccd87cb6b41107851c71c78d988e883bb8a162982b6aa1ec782d17fe0e690de342b1b604d7cad37a8d87160359ed1ac99e0d13789909953644fe3b3706ecfb24dbf3b7350c0a322602ce6f59d84e1023fc968c12b59f950c06c68e3358ca85991ad4b43c", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028024000180060002000c00000008000b0073697000070006006e71000008000b00736970000800041b020000000400028004000180080004000000000088a7d0e8eeb6cdcf63fa41f5b41b1bf4c8f81e941501165f3b52869ef8c158e1402c72d6af6b8a30f66c63e006132d4af7d5acb926d130f762778832cbc4a75eed6e"], 0x54}, 0x1, 0x0, 0x0, 0x24000084}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f7ffff48e30000000021b880d26dc26b97bafff1bb373bdd000000000000000303fe1c09863121f9c4569e41e8a4dfeb17fde4aa6d6b08bea490", @ANYRESDEC=0x0, @ANYRESHEX=r5], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 625.166920][T14182] IPVS: ftp: loaded support on port[0] = 21 00:14:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(0xffffffffffffffff) [ 625.624264][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 625.624333][ T28] audit: type=1804 audit(1599437690.563:87): pid=14213 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/50/memory.events" dev="sda1" ino=16049 res=1 00:14:50 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="6736fd6c34199d5d43d134fb41fc759ff47d81432059b25fd95781cda54906ac8ff542d56598ae01c7c2156698c3ef4fbb3209b3592350f0d59f3a7dc584d8f8c74fb2be0d65b5c41ea39db4bc28995e325349a70d97f2724801e7e1ca400096db4132f86fd09e998d7bfe478709e82bf495f456526db1", 0x77}], 0x1}, 0x0) [ 625.658232][ T28] audit: type=1800 audit(1599437690.563:88): pid=14213 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16049 res=0 [ 625.680570][ T28] audit: type=1804 audit(1599437690.593:89): pid=14213 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/50/memory.events" dev="sda1" ino=16049 res=1 00:14:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a80392f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed367fddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f5500000000240001000d000100636f6e6e6d61726b000000000400028004000600"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(0xffffffffffffffff) [ 626.469271][ T28] audit: type=1804 audit(1599437690.793:90): pid=14216 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/50/memory.events" dev="sda1" ino=16049 res=1 00:14:51 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'sh\x00'}, 0x2c) 00:14:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xf, 0x0, &(0x7f0000000040)=0xfffffffffffffd03) 00:14:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) [ 627.072561][T14238] IPVS: ftp: loaded support on port[0] = 21 [ 627.222904][T14242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:14:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffeffff}, 0x8) close(0xffffffffffffffff) 00:14:52 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x1) 00:14:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x7c, 0x30, 0x727, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "c9b2483db858ef59e6ce30a682908ea3"}, @TCA_CT_ZONE={0x6, 0x4, 0x797}, @TCA_CT_LABELS_MASK={0x14, 0x8, "bf6614dd68622cce6d98faed56525a4b"}, @TCA_CT_MARK={0x8}]}, {0x4}}}]}]}, 0x7c}}, 0x0) 00:14:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1a, 0x0, 0x3, &(0x7f0000000080)) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$llc(r0, &(0x7f00000003c0)="b16c19727b5145c55a83f8c65ce6792638774313465fe16df9010183be160a0b333d2ea4a64ac1c1d9c4f17c1c0f093f2275200eeb5ade6feb2ef578b5704a6cc600c5bb02f749316d9e46f667d21fba096df5d45c2dde1547e0bff8ac44b7514ded39fdc849dc09087b75877710a17a4eed0ffade0615f2a471321531a6cd74337d8edddbc79980056db3979dad33fb6dff469c0b2ed77ff0b40f1d26ee88c0b20715796757d6a5b81be6ff3d4e825fb57cf33364dc0197fbfb73d0e931a3", 0xbf, 0x20000000, &(0x7f0000000300)={0x1a, 0xfef0, 0xfc, 0xff, 0x2, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) 00:14:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x890e, &(0x7f00000001c0)="080d9b055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0xfc, 0x7fffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7ffffffd}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0xc, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) close(0xffffffffffffffff) accept4$ax25(r3, 0x0, &(0x7f0000000040), 0x80800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0xc, r5}) close(r5) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="87b280000700e219c30be2dfa4b60f4cda017b53b8ca82fc55a87ec9ee8f4baf0c1d69b393770d6c1c3b9bdafdd42a3ad416d6e7269e5ea9270eca6f1a7f7d7648fbfb44177cf90c8d9b6c8f10f90133892e05492a7f1a440800000037200acc311060b7c7aeac0069"], 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=@newsa={0x14c, 0x10, 0x721, 0x40, 0x0, {{@in, @in6=@dev}, {@in=@broadcast, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @XFRMA_SET_MARK_MASK={0x8}, @XFRMA_SET_MARK={0x8}]}, 0x14c}}, 0x0) 00:14:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000100)={0x0, 0x0, 0x2be20000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:14:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) read(r0, &(0x7f0000000200)=""/165, 0xfffffffffffffdef) 00:14:53 executing program 4: socket$kcm(0xa, 0x922000000003, 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r0, &(0x7f0000000140), 0xfd45) [ 629.191563][ T8717] tipc: TX() has been purged, node left! [ 629.239212][ T8717] tipc: TX() has been purged, node left! 00:14:54 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) recvmmsg(r1, &(0x7f0000005600)=[{{0x0, 0x51, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x4, 0x4) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x237, 0x4000a00) 00:14:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="02000000001375f16f3be420ee614c0df8", 0x11) 00:14:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0xaf726) 00:14:55 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x721c2, 0x0) 00:14:55 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x25, 0x1, 0x0) close(r0) 00:14:55 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800000}, [@netrom, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @netrom, @bcast]}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44000102, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f00) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002cc0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x3a, &(0x7f0000000000)}, 0x0) 00:14:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") clock_gettime(0xfffffff3, 0x0) 00:14:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x1f, 0x0, 0x0, 0x7f}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7fa) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f0000000900), 0x40000000000010b, 0x0, 0x0) 00:14:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x5c8, 0x0, 0x61, 0x148, 0x0, 0x148, 0x530, 0x240, 0x240, 0x530, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2c8, 0x328, 0x0, {0x3400000000000000}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xad}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x0, 0x80}]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x1a0, 0x208, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@recent1={{0x108, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000007d00)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 00:14:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000003daa000000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 00:14:57 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x56e3502e, @private2}}, 0x0, 0x1, 0xff, 0x8001}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) [ 632.619078][T14337] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 00:14:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000030c0)=""/263, 0x107}], 0x1}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 00:14:57 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 632.752643][T14337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 632.814096][T14376] bond2: (slave bridge1): making interface the new active one [ 632.828330][T14376] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 632.849451][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 632.955758][ T28] audit: type=1804 audit(1599437697.904:91): pid=14362 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/53/memory.events" dev="sda1" ino=15733 res=1 [ 632.982427][ T28] audit: type=1800 audit(1599437697.904:92): pid=14362 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=15733 res=0 00:14:58 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x9, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x1, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) [ 633.198866][T14341] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 633.397401][ T28] audit: type=1804 audit(1599437697.984:93): pid=14381 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/53/memory.events" dev="sda1" ino=15733 res=1 [ 633.424336][ T28] audit: type=1804 audit(1599437698.034:94): pid=14362 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/53/memory.events" dev="sda1" ino=15733 res=1 [ 633.450193][ T28] audit: type=1804 audit(1599437698.094:95): pid=14362 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir621545885/syzkaller.jwnGU4/53/memory.events" dev="sda1" ino=15733 res=1 00:14:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000240)=@generic={0x2, "838cadf7a907cd61760443f028aa1f0ec616d0ca16946a9c50bb54ebd6b06d048ab3480f68d31867c4e63ec9d23ef3dabaa5f7de188f0f372b054aea819bfcd9444ebbda61e47606ce5c71e2795fb354885a60973082b2c803453b5334542b4a408515282f41b150c344439fd7ee31f3a7270a32422f76b6c78131325d92"}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)="86", 0x1}], 0x1}}, {{&(0x7f0000001680)=@l2, 0x80, &(0x7f0000001980)=[{&(0x7f0000001700)='.', 0x1}], 0x1}}], 0x2, 0x40) 00:14:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x50) 00:14:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 00:14:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 00:14:59 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 00:14:59 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x4010040c000) 00:14:59 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f0000000000)) 00:14:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400500000000004704000001ed00007b130000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f1479531dd8826fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec01a8aa7749f3187e9efb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 00:14:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1e, 0x0, &(0x7f0000000100)) 00:15:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000010c0)) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) [ 635.355611][ T28] audit: type=1804 audit(1599437700.304:96): pid=14418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/75/memory.events" dev="sda1" ino=16376 res=1 [ 635.382248][ T28] audit: type=1800 audit(1599437700.304:97): pid=14418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16376 res=0 00:15:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)) [ 635.470257][ T8717] tipc: TX() has been purged, node left! 00:15:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x6, 0xd, &(0x7f0000937fed)=""/16, &(0x7f0000000000)=0x10) [ 635.811234][ T28] audit: type=1804 audit(1599437700.354:98): pid=14418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/75/memory.events" dev="sda1" ino=16376 res=1 00:15:00 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x54, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x3, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x54}}, 0x0) 00:15:00 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000780)) [ 635.837669][ T28] audit: type=1804 audit(1599437700.354:99): pid=14418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/75/memory.events" dev="sda1" ino=16376 res=1 [ 635.865439][ T28] audit: type=1804 audit(1599437700.394:100): pid=14416 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir111756019/syzkaller.jXPqbp/75/memory.events" dev="sda1" ino=16376 res=1 [ 635.979383][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.141448][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.332030][T14434] tipc: Enabling of bearer rejected, failed to enable media 00:15:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="ba", 0x1}], 0x1) [ 636.448027][T14436] tipc: Enabling of bearer rejected, failed to enable media 00:15:01 executing program 1: socket(0x0, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x1}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x3f00000000000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x7fffffff) 00:15:02 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000000c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800000}, [@netrom, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @netrom, @bcast]}, 0x48) 00:15:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) 00:15:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c}, 0x7ffff000}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$tipc(0x1e, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:15:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0x7}]}, 0x28}}, 0x0) 00:15:02 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_for_children\x00') [ 637.609526][T14462] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 00:15:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ab08a6ca386346234ce8bb0b47c21a9d55", 0x11) 00:15:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500"], 0x3c}}, 0x0) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x32a, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x7, 0x20, 0x3, 0x6, {{0x38, 0x4, 0x3, 0x0, 0xe0, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x5, [{@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6b, 0x3, [{0x0, 0xc, "3d87d4aa54edbd77f600"}, {0x1, 0x9, "48ea8ed2434c77"}, {0x2, 0xf, "79556644a0065d4c140d113393"}, {0x0, 0x3, 'P'}, {0x5, 0xf, "9e3baba2d2d93040b1f440ee5a"}, {0x7, 0xa, "4e8474d676337e5b"}, {0x2, 0xd, "d65d82ec82b00d63184042"}, {0x1, 0xf, "78f2ad8c4b1f54113194855876"}, {0x7, 0x9, "835b8e22299583"}]}, @noop, @ssrr={0x89, 0xf, 0x5b, [@broadcast, @loopback, @local]}, @lsrr={0x83, 0x2b, 0xb5, [@multicast1, @private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @rand_addr=0x64010100, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x9a, [@private=0xa010101, @empty]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400000014000e000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) 00:15:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 00:15:03 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x20) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 638.731581][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 638.824430][T14482] bridge1: port 1(bond0) entered blocking state [ 638.831197][T14482] bridge1: port 1(bond0) entered disabled state [ 638.844888][T14482] device bond0 entered promiscuous mode [ 638.850554][T14482] device bond_slave_0 entered promiscuous mode [ 638.858001][T14482] device bond_slave_1 entered promiscuous mode 00:15:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x75, 0x0, 0x0) [ 638.906362][T14483] device bond0 left promiscuous mode [ 638.911858][T14483] device bond_slave_0 left promiscuous mode [ 638.918948][T14483] device bond_slave_1 left promiscuous mode [ 638.926575][T14483] bridge1: port 1(bond0) entered disabled state 00:15:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 00:15:04 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, 0x0, 0x0) [ 639.246718][ C0] not chained 40000 origins [ 639.251467][ C0] CPU: 0 PID: 9038 Comm: kworker/u4:3 Not tainted 5.8.0-rc5-syzkaller #0 [ 639.259969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.270309][ C0] Workqueue: krdsd rds_connect_worker [ 639.275681][ C0] Call Trace: [ 639.278984][ C0] [ 639.282560][ C0] dump_stack+0x21c/0x280 [ 639.287019][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 639.292870][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.298076][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 639.303983][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 639.310373][ C0] ? tcp_select_initial_window+0x949/0xa00 [ 639.316205][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.321416][ C0] __msan_chain_origin+0x50/0x90 [ 639.326530][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 639.332110][ C0] tcp_conn_request+0x3046/0x4c30 [ 639.337161][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.342519][ C0] tcp_v6_conn_request+0x27f/0x330 [ 639.348050][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 639.353340][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 639.358713][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.363927][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.369993][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.375504][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 639.380381][ C0] ? tcp_v6_fill_cb+0x4a1/0x5f0 [ 639.385703][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 639.390339][ C0] ? tcp_v6_early_demux+0xd60/0xd60 [ 639.395630][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 639.401575][ C0] ip6_input+0x2dd/0x370 [ 639.405942][ C0] ? ip6_input+0x370/0x370 [ 639.410983][ C0] ? ip6_protocol_deliver_rcu+0x2660/0x2660 [ 639.417002][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 639.421699][ C0] ipv6_rcv+0x3bb/0x460 [ 639.426011][ C0] ? local_bh_enable+0x40/0x40 [ 639.430867][ C0] __netif_receive_skb+0x265/0x670 [ 639.436010][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 639.441550][ C0] ? ip6_rcv_finish+0x7f0/0x7f0 [ 639.446414][ C0] process_backlog+0x50d/0xba0 [ 639.451192][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 639.457000][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 639.462552][ C0] napi_poll+0x43b/0xfd0 [ 639.466967][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.472376][ C0] net_rx_action+0x35c/0xd40 [ 639.476971][ C0] ? net_tx_action+0xdc0/0xdc0 [ 639.484970][ C0] __do_softirq+0x2ea/0x7f5 [ 639.491211][ C0] asm_call_on_stack+0xf/0x20 [ 639.495889][ C0] [ 639.498971][ C0] do_softirq_own_stack+0x7c/0xa0 [ 639.504050][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 639.509352][ C0] local_bh_enable+0x36/0x40 [ 639.513939][ C0] ip6_finish_output2+0x24b4/0x2a70 [ 639.519146][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.524340][ C0] __ip6_finish_output+0x9c0/0xa90 [ 639.529453][ C0] ip6_finish_output+0x14b/0x4b0 [ 639.534391][ C0] ip6_output+0x68d/0x7f0 [ 639.538723][ C0] ? ip6_output+0x7f0/0x7f0 [ 639.543479][ C0] ? ac6_seq_show+0x200/0x200 [ 639.548148][ C0] ip6_xmit+0x2475/0x2b40 [ 639.552513][ C0] ? ip6_xmit+0x2b40/0x2b40 [ 639.557029][ C0] inet6_csk_xmit+0x47f/0x5a0 [ 639.561812][ C0] ? inet6_csk_addr2sockaddr+0x330/0x330 [ 639.567530][ C0] __tcp_transmit_skb+0x4b9e/0x5d70 [ 639.572726][ C0] ? kmsan_set_origin_checked+0x95/0xf0 [ 639.578385][ C0] tcp_connect+0x153f/0x3bb0 [ 639.582988][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 639.588358][ C0] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 639.594178][ C0] ? tcp_fastopen_defer_connect+0x106/0xae0 [ 639.600871][ C0] tcp_v6_connect+0x2be8/0x2d40 [ 639.605745][ C0] ? tcp_v6_pre_connect+0x130/0x130 [ 639.612001][ C0] __inet_stream_connect+0x14fe/0x16f0 [ 639.617494][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.622716][ C0] inet_stream_connect+0x101/0x180 [ 639.629062][ C0] ? __inet_stream_connect+0x16f0/0x16f0 [ 639.635696][ C0] rds_tcp_conn_path_connect+0x93d/0xcc0 [ 639.641359][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.646569][ C0] ? rds_tcp_state_change+0x400/0x400 [ 639.651949][ C0] rds_connect_worker+0x36b/0x550 [ 639.656983][ C0] ? rds_addr_cmp+0x290/0x290 [ 639.662718][ C0] process_one_work+0x1688/0x2140 [ 639.667768][ C0] worker_thread+0x10bc/0x2730 [ 639.672536][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.678522][ C0] ? kmsan_get_metadata+0x116/0x180 [ 639.683726][ C0] kthread+0x551/0x590 [ 639.690607][ C0] ? process_one_work+0x2140/0x2140 [ 639.695805][ C0] ? kthread_blkcg+0x110/0x110 [ 639.700594][ C0] ret_from_fork+0x1f/0x30 [ 639.705029][ C0] Uninit was stored to memory at: [ 639.710251][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 639.717358][ C0] __msan_chain_origin+0x50/0x90 [ 639.722295][ C0] tcp_conn_request+0x19d6/0x4c30 [ 639.727314][ C0] tcp_v6_conn_request+0x27f/0x330 [ 639.732568][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 639.737930][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 639.742683][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 639.747178][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 639.752907][ C0] ip6_input+0x2dd/0x370 [ 639.757149][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 639.761825][ C0] ipv6_rcv+0x3bb/0x460 [ 639.765976][ C0] __netif_receive_skb+0x265/0x670 [ 639.771079][ C0] process_backlog+0x50d/0xba0 [ 639.775962][ C0] napi_poll+0x43b/0xfd0 [ 639.780216][ C0] net_rx_action+0x35c/0xd40 [ 639.784803][ C0] __do_softirq+0x2ea/0x7f5 [ 639.789410][ C0] [ 639.791810][ C0] Uninit was stored to memory at: [ 639.796840][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 639.802548][ C0] __msan_chain_origin+0x50/0x90 [ 639.808466][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 639.813835][ C0] tcp_conn_request+0x3046/0x4c30 [ 639.820336][ C0] tcp_v6_conn_request+0x27f/0x330 [ 639.825626][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 639.831014][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 639.836232][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 639.840737][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 639.846635][ C0] ip6_input+0x2dd/0x370 [ 639.851461][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 639.856673][ C0] ipv6_rcv+0x3bb/0x460 [ 639.860941][ C0] __netif_receive_skb+0x265/0x670 [ 639.866059][ C0] process_backlog+0x50d/0xba0 [ 639.870840][ C0] napi_poll+0x43b/0xfd0 [ 639.875083][ C0] net_rx_action+0x35c/0xd40 [ 639.880004][ C0] __do_softirq+0x2ea/0x7f5 [ 639.884497][ C0] [ 639.886816][ C0] Uninit was stored to memory at: [ 639.891864][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 639.897603][ C0] __msan_chain_origin+0x50/0x90 [ 639.902538][ C0] tcp_conn_request+0x19d6/0x4c30 [ 639.907567][ C0] tcp_v6_conn_request+0x27f/0x330 [ 639.912931][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 639.918554][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 639.923320][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 639.927824][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 639.933543][ C0] ip6_input+0x2dd/0x370 [ 639.937784][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 639.943069][ C0] ipv6_rcv+0x3bb/0x460 [ 639.947244][ C0] __netif_receive_skb+0x265/0x670 [ 639.952457][ C0] process_backlog+0x50d/0xba0 [ 639.957233][ C0] napi_poll+0x43b/0xfd0 [ 639.961472][ C0] net_rx_action+0x35c/0xd40 [ 639.966055][ C0] __do_softirq+0x2ea/0x7f5 [ 639.970555][ C0] [ 639.972868][ C0] Uninit was stored to memory at: [ 639.978027][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 639.983856][ C0] __msan_chain_origin+0x50/0x90 [ 639.988804][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 639.994083][ C0] tcp_conn_request+0x3046/0x4c30 [ 639.999134][ C0] tcp_v6_conn_request+0x27f/0x330 [ 640.004380][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 640.010024][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 640.015855][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 640.021000][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 640.026713][ C0] ip6_input+0x2dd/0x370 [ 640.031041][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 640.035907][ C0] ipv6_rcv+0x3bb/0x460 [ 640.040055][ C0] __netif_receive_skb+0x265/0x670 [ 640.045165][ C0] process_backlog+0x50d/0xba0 [ 640.049927][ C0] napi_poll+0x43b/0xfd0 [ 640.054266][ C0] net_rx_action+0x35c/0xd40 [ 640.059143][ C0] __do_softirq+0x2ea/0x7f5 [ 640.063668][ C0] [ 640.066082][ C0] Uninit was stored to memory at: [ 640.071212][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 640.077087][ C0] __msan_chain_origin+0x50/0x90 [ 640.082820][ C0] tcp_conn_request+0x19d6/0x4c30 [ 640.087876][ C0] tcp_v6_conn_request+0x27f/0x330 [ 640.092997][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 640.098965][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 640.103751][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 640.108264][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 640.114068][ C0] ip6_input+0x2dd/0x370 [ 640.119176][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 640.123863][ C0] ipv6_rcv+0x3bb/0x460 [ 640.128732][ C0] __netif_receive_skb+0x265/0x670 [ 640.134806][ C0] process_backlog+0x50d/0xba0 [ 640.140033][ C0] napi_poll+0x43b/0xfd0 [ 640.145266][ C0] net_rx_action+0x35c/0xd40 [ 640.149961][ C0] __do_softirq+0x2ea/0x7f5 [ 640.156047][ C0] [ 640.158723][ C0] Uninit was stored to memory at: [ 640.163999][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 640.169717][ C0] __msan_chain_origin+0x50/0x90 [ 640.175241][ C0] tcp_openreq_init_rwin+0xf3e/0xf70 [ 640.180690][ C0] tcp_conn_request+0x3046/0x4c30 [ 640.185870][ C0] tcp_v6_conn_request+0x27f/0x330 [ 640.191001][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 640.196459][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 640.201239][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 640.206078][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 640.212947][ C0] ip6_input+0x2dd/0x370 [ 640.217277][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 640.221960][ C0] ipv6_rcv+0x3bb/0x460 [ 640.227083][ C0] __netif_receive_skb+0x265/0x670 [ 640.232732][ C0] process_backlog+0x50d/0xba0 [ 640.238664][ C0] napi_poll+0x43b/0xfd0 [ 640.243205][ C0] net_rx_action+0x35c/0xd40 [ 640.248299][ C0] __do_softirq+0x2ea/0x7f5 [ 640.253087][ C0] [ 640.255669][ C0] Uninit was stored to memory at: [ 640.261712][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 640.267486][ C0] __msan_chain_origin+0x50/0x90 [ 640.272572][ C0] tcp_conn_request+0x19d6/0x4c30 [ 640.277801][ C0] tcp_v6_conn_request+0x27f/0x330 [ 640.283868][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 640.289268][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 640.294044][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 640.298627][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 640.304468][ C0] ip6_input+0x2dd/0x370 [ 640.308710][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 640.313479][ C0] ipv6_rcv+0x3bb/0x460 [ 640.317656][ C0] __netif_receive_skb+0x265/0x670 [ 640.322943][ C0] process_backlog+0x50d/0xba0 [ 640.328224][ C0] napi_poll+0x43b/0xfd0 [ 640.332482][ C0] net_rx_action+0x35c/0xd40 [ 640.337177][ C0] __do_softirq+0x2ea/0x7f5 [ 640.341872][ C0] [ 640.344195][ C0] Uninit was created at: [ 640.348450][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 640.354682][ C0] kmsan_alloc_page+0xc5/0x1a0 [ 640.359632][ C0] __alloc_pages_nodemask+0xdf0/0x1030 [ 640.365448][ C0] alloc_pages_current+0x685/0xb50 [ 640.371115][ C0] alloc_slab_page+0x11c/0x1240 [ 640.376252][ C0] new_slab+0x2bf/0x10c0 [ 640.380493][ C0] ___slab_alloc+0xcd3/0x18a0 [ 640.386181][ C0] kmem_cache_alloc+0xb70/0xc50 [ 640.391134][ C0] inet_reqsk_alloc+0xaf/0x910 [ 640.400328][ C0] tcp_conn_request+0x8dc/0x4c30 [ 640.405258][ C0] tcp_v6_conn_request+0x27f/0x330 [ 640.411336][ C0] tcp_rcv_state_process+0x2de/0x45b0 [ 640.417409][ C0] tcp_v6_do_rcv+0x11cb/0x1fe0 [ 640.423652][ C0] tcp_v6_rcv+0x4967/0x5a80 [ 640.428166][ C0] ip6_protocol_deliver_rcu+0x14a2/0x2660 [ 640.434601][ C0] ip6_input+0x2dd/0x370 [ 640.438846][ C0] ip6_rcv_finish+0x5fc/0x7f0 [ 640.443692][ C0] ipv6_rcv+0x3bb/0x460 [ 640.447846][ C0] __netif_receive_skb+0x265/0x670 [ 640.452950][ C0] process_backlog+0x50d/0xba0 [ 640.457707][ C0] napi_poll+0x43b/0xfd0 [ 640.461941][ C0] net_rx_action+0x35c/0xd40 [ 640.466522][ C0] __do_softirq+0x2ea/0x7f5 [ 640.641698][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:15:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1a, 0x0, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f00000003c0)={0x7fffffff, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @loopback}}}, 0x108) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000005340)={0x0, 0x1c9c380}) 00:15:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a00000900000000000000c7000000000000000000000000000000008000000000004d9d86"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 00:15:06 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}, "00006371ae9b1cee"}}}}}, 0x0) 00:15:08 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:15:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000001cc0)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d133b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e03f11f086e6bf39ab074b690284b6d6af4a433dfe6c63a50047a263f6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e216667c6f72b64fdcad802718d16b390d4b4dc05bffb838b7e6831cc53b65b1de0bbf6af1311a722a80065913d37bea8c988e3b3f05ab1eb02d6b52a11191f1ced75b0200502e5f2881204104e152b5644da9d26301ed8905156a069c61444d44d82c135ff4f20574247a4a5cc963e3c395a029125ccae1f1564a3e28e06b1a08e47bd1a9621edf1003d167cbdfc0be2a4914908198575a688a38d24bdc9881ced9fe04e119a87b9286ea15aa168163a9650a26a926c571f2f0e0b2102de1fd1a6920cb71d846f02b2c23f80a3c0116b48d14925e69c4a65126e544995e0cb5fefaa870ddd66e8eb47a3be8f07fcd361dcf144c865fe355e3b98e6d4694d74aa6d3d75c7c568feabdcb483c5c22ca40782cd2dea789dc677c603227878c369a3b7a3204bf1bc9b1fdb1e00447152e854095b9527d6e980b1bac1b1ec6e9706084ac77b383bd4e555a11410f6a830b66ec9b0fa58abf222386386a06bad5baa2b55174b0db5108d79849c1028550fb3c7138754788000000009cd6a0975db4257bf599f7d82462f914e4e641aa399ba721e72fd53d21af1f5d2a075bfd90044c562027ec840170b2d6499adf68ed790a5ce5a49933f55c0df0b2a2ae252b5bf00b5ca0ec0005674ac62eee923cae59edeab59c1d00ca6d6f56c5ed757ce4cb67a55bcc9fb79105dbf6d0bb978631ac3bb68fc7bf0b2e88a056f10ba6174b9a511d8cd7257c82a9c66f399d5d9bda583af51f9a2dc086e1ca1a9bc7c57329d4932960b4594c94a8ef63132321531d313651616f40a0d63dc130d362f080edce63bece561f21bb9f52b5a37146f85fff27bbd5c8c7f3665ec7aa5de0c848ff2917fbe32f4a5af72687bf7fe8b2c1dadd2fb040d42735b6aad007b5ecd21b0c54cfbfd39774d3ea03f8249b733671b40a14bccd53bb017e05d75edeece9b46543d99fda74492185b63aad493bc152d17cb5839b04a4f60c32d82d8b2d5118399a45f51f8089a514f663f89bcc2dc360593e2000000000000000000000000000000002e1e35d950f90bd9f93ee7adb2bf669003bd0e898a8601114e0855f57921a795c153fa7b132a97eb6a3edcace0155ee9df8ec96b00"/993, 0x3e1}, {&(0x7f0000000140)="52f9c29ef60a9985d667ca8d1ce9", 0xe}, {&(0x7f0000000300)="0ebbb218be8d3954e135df5f396071992eaf48c6be4575b2cd72c05da2dcf622ab81bfb5e04f14d17c07fe83b1e0455bfd319b6812e89ad48e9467125948fbe0fd43d11c277ad671710da0a26430c907ece20848c55cb51bd29bc11e20d0f35708eed18d4b01c01ce4e7011ca4", 0x6d}, {&(0x7f0000001a80)="297e4f428a5bd25fc5e181b8323b4bab1662f81f3b492c550a8c23ef6b05668596ff29a3eb3e577ba6ba7d198ec18a2e35358d03c8c9abb1cc225873b8435c3cb24254ccbb69f18a633497c3918affcfb40fecf3f86837349f65f05b76bd424111de16aba7c05e8f084be60baaf9571c93185578f05a9c218b99f56695d69fcf7be61d87b3cfb6c3aa6a247da33ab9b620a0acc6000a461b753d17c9066bae35847767e5fae8b49fc3775830ca74810416684dfc33780812551ae1d8103aed9144a6d5d29472bfff7cd6975e126120831163dd4e9013271960c9dd768080000e18bf6cf63f35651874fd7fb8660746840b48bb7ebf01ac5eb31bb80f57e928606f3e1e9a51f3fa98c9ed2f1aed1f27a82603a168483b908946e5a469d111c03cd68eb66ebc2f72a18088908c7bc5061ca8c782700d19af436467b8b148dbde6bf8e3b1595e8781874390b16645592e91efe37de5cd9058f4f06709e081d49e5b9573b2fb32cf0b1cc9622882a462bc0e640836c35d4a325d7a8bef3ca423202b6ce76dbac6b8627f354e0067f2480f223d014703170813baaa623be93cf2c6", 0x19f}, {&(0x7f0000001840)="50cd1f4989b23a8f3fcf6ea8fc29c9b151cadb016fb801e1be0f94bb7f66a3d2ea6e3c726e9d7c051f746a3f3f291c607186a4db2cdc8af3b280a9e7bb3d546ce1fb0730fe38712ae66e2203a0ce57f7a61c6684ee3a0adfb4cc4832cf436ac6045ca7ca16f8405471062cf19e04e563c0f88cc89a7170079aaadbb4b4a2d3b569e86c99451bf23cf99343dc732a2b5bd70579e6d914", 0x96}], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) 00:15:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x18, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}, @offload={0xc}]}, 0x16c}}, 0x0) 00:15:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:15:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x80001000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x36}, [@call={0x4e}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 00:15:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140), 0x8) 00:15:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x88, 0x67, &(0x7f0000000100)="02000000", 0x4) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts_2292={{0x98, 0x29, 0x36, {0x0, 0x10, [], [@generic={0x0, 0x30, "6d18a06f484496839e7442c21c3063b621adce925eb51c893f1a69160f08306a756481bfefc5c083a6b2dd09e64f97ef"}, @jumbo, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo]}}}], 0x98}}], 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005640)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x2f, 0x4f, 0x71, 0x95, 0xd, @private2={0xfc, 0x2, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x20, 0x4}}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) 00:15:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000b67000), &(0x7f0000000000)=0x4) 00:15:10 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002280)={'ip6_vti0\x00', &(0x7f0000002040)=@ethtool_eee={0x45}}) 00:15:10 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0x8) sendto$inet6(r1, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) 00:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 00:15:10 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 00:15:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r1, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x0) [ 645.937505][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 646.063926][T14561] device bond2 entered promiscuous mode [ 646.095129][T14565] device bridge2 entered promiscuous mode [ 646.102772][T14565] bond2: (slave bridge2): Enslaving as an active interface with an up link 00:15:11 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffdb5}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a000200bbbbbbbbbbbb00fd050005"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 00:15:11 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002280)={'ip6_vti0\x00', &(0x7f0000002040)=@ethtool_eee={0x45}}) [ 646.275096][T14566] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 646.325928][T14566] device bridge2 left promiscuous mode [ 646.950208][T14566] bond2 (unregistering): Released all slaves 00:15:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r4}, 0x18) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) 00:15:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000002400697c980900000000000000002000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c13b15f3d9c9fd6b1380002000800050000000000080005000f00000038000300050000000000000040ceb860000000000000000000000000020000"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0) 00:15:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x400448ca, 0x0) [ 647.288706][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 647.653871][T14660] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.666312][T14659] ===================================================== [ 647.673581][T14659] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 647.681930][T14659] CPU: 1 PID: 14659 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 647.691473][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.702099][T14659] Call Trace: [ 647.705700][T14659] dump_stack+0x21c/0x280 [ 647.712587][T14659] kmsan_report+0xf7/0x1e0 [ 647.717571][T14659] kmsan_internal_check_memory+0x238/0x3d0 [ 647.723801][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.729229][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.734465][T14659] kmsan_copy_to_user+0x81/0x90 [ 647.739361][T14659] _copy_to_user+0x18e/0x260 [ 647.744658][T14659] move_addr_to_user+0x3de/0x670 [ 647.749880][T14659] __sys_getpeername+0x499/0x690 [ 647.755695][T14659] ? put_old_timespec32+0x231/0x2d0 [ 647.761539][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.766798][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.772225][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.777860][T14659] __se_sys_getpeername+0x91/0xb0 [ 647.783148][T14659] __ia32_sys_getpeername+0x4a/0x70 [ 647.789616][T14659] __do_fast_syscall_32+0x2af/0x480 [ 647.795041][T14659] do_fast_syscall_32+0x6b/0xd0 [ 647.799920][T14659] do_SYSENTER_32+0x73/0x90 [ 647.804448][T14659] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 647.810818][T14659] RIP: 0023:0xf7fc9549 [ 647.814982][T14659] Code: Bad RIP value. [ 647.819070][T14659] RSP: 002b:00000000f55c30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000170 [ 647.828018][T14659] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 647.836008][T14659] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.843993][T14659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.851979][T14659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 647.860069][T14659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.868080][T14659] [ 647.870420][T14659] Local variable ----address@__sys_getpeername created at: [ 647.878381][T14659] __sys_getpeername+0x91/0x690 [ 647.884218][T14659] __sys_getpeername+0x91/0x690 [ 647.889471][T14659] [ 647.891809][T14659] Bytes 2-3 of 20 are uninitialized [ 647.897975][T14659] Memory access of size 20 starts at ffff888109a8fd50 [ 647.904733][T14659] Data copied to user address 0000000020000080 [ 647.911283][T14659] ===================================================== [ 647.918323][T14659] Disabling lock debugging due to kernel taint [ 647.924645][T14659] Kernel panic - not syncing: panic_on_warn set ... [ 647.931569][T14659] CPU: 1 PID: 14659 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 647.943895][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.954509][T14659] Call Trace: [ 647.957819][T14659] dump_stack+0x21c/0x280 [ 647.962206][T14659] panic+0x4d7/0xef7 [ 647.966108][T14659] ? add_taint+0x17c/0x210 [ 647.972027][T14659] kmsan_report+0x1df/0x1e0 [ 647.976671][T14659] kmsan_internal_check_memory+0x238/0x3d0 [ 647.982868][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.988623][T14659] ? kmsan_get_metadata+0x116/0x180 [ 647.994009][T14659] kmsan_copy_to_user+0x81/0x90 [ 647.998859][T14659] _copy_to_user+0x18e/0x260 [ 648.003477][T14659] move_addr_to_user+0x3de/0x670 [ 648.008437][T14659] __sys_getpeername+0x499/0x690 [ 648.013769][T14659] ? put_old_timespec32+0x231/0x2d0 [ 648.019091][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.024583][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.029805][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.035145][T14659] __se_sys_getpeername+0x91/0xb0 [ 648.040378][T14659] __ia32_sys_getpeername+0x4a/0x70 [ 648.045696][T14659] __do_fast_syscall_32+0x2af/0x480 [ 648.051872][T14659] do_fast_syscall_32+0x6b/0xd0 [ 648.056846][T14659] do_SYSENTER_32+0x73/0x90 [ 648.061492][T14659] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.067934][T14659] RIP: 0023:0xf7fc9549 [ 648.072034][T14659] Code: Bad RIP value. [ 648.076627][T14659] RSP: 002b:00000000f55c30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000170 [ 648.085389][T14659] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 648.093633][T14659] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.101723][T14659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.110621][T14659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 648.118721][T14659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.127527][T14659] ------------[ cut here ]------------ [ 648.133630][T14659] kernel BUG at mm/kmsan/kmsan.h:87! [ 648.139045][T14659] invalid opcode: 0000 [#1] SMP [ 648.144530][T14659] CPU: 1 PID: 14659 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 648.154749][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.165253][T14659] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 648.171963][T14659] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 18 03 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 e2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 648.194207][T14659] RSP: 0018:ffff888109a8f778 EFLAGS: 00010046 [ 648.202318][T14659] RAX: 0000000000000002 RBX: 0000000007470044 RCX: 0000000007470044 [ 648.210465][T14659] RDX: 0000000000000000 RSI: 0000000000000420 RDI: ffff888109a8f85c [ 648.219232][T14659] RBP: ffff888109a8f820 R08: ffffea000000000f R09: ffff88812fffa000 [ 648.227406][T14659] R10: 0000000000000002 R11: ffff8881021b5b80 R12: 0000000000000000 [ 648.237197][T14659] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 648.246324][T14659] FS: 0000000000000000(0000) GS:ffff88812fd00000(0063) knlGS:00000000f55c3b40 [ 648.257121][T14659] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 648.265159][T14659] CR2: 00000000081090b4 CR3: 000000010a56e000 CR4: 00000000001406e0 [ 648.274065][T14659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.282308][T14659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.293482][T14659] Call Trace: [ 648.296881][T14659] kmsan_check_memory+0xd/0x10 [ 648.301783][T14659] iowrite8+0x99/0x300 [ 648.306021][T14659] pvpanic_panic_notify+0xb7/0xe0 [ 648.311674][T14659] ? pvpanic_mmio_remove+0x60/0x60 [ 648.316776][T14659] atomic_notifier_call_chain+0x123/0x290 [ 648.322799][T14659] panic+0x560/0xef7 [ 648.327754][T14659] ? add_taint+0x17c/0x210 [ 648.332303][T14659] kmsan_report+0x1df/0x1e0 [ 648.337831][T14659] kmsan_internal_check_memory+0x238/0x3d0 [ 648.343947][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.349506][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.355295][T14659] kmsan_copy_to_user+0x81/0x90 [ 648.360233][T14659] _copy_to_user+0x18e/0x260 [ 648.364923][T14659] move_addr_to_user+0x3de/0x670 [ 648.369977][T14659] __sys_getpeername+0x499/0x690 [ 648.375210][T14659] ? put_old_timespec32+0x231/0x2d0 [ 648.381441][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.386623][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.391904][T14659] ? kmsan_get_metadata+0x116/0x180 [ 648.397559][T14659] __se_sys_getpeername+0x91/0xb0 [ 648.402784][T14659] __ia32_sys_getpeername+0x4a/0x70 [ 648.408867][T14659] __do_fast_syscall_32+0x2af/0x480 [ 648.414169][T14659] do_fast_syscall_32+0x6b/0xd0 [ 648.419157][T14659] do_SYSENTER_32+0x73/0x90 [ 648.423850][T14659] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 648.430251][T14659] RIP: 0023:0xf7fc9549 [ 648.434296][T14659] Code: Bad RIP value. [ 648.438431][T14659] RSP: 002b:00000000f55c30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000170 [ 648.447369][T14659] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000080 [ 648.455887][T14659] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.463957][T14659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.472226][T14659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 648.481750][T14659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.489735][T14659] Modules linked in: [ 648.493641][T14659] ---[ end trace d1b538227152af24 ]--- [ 648.499812][T14659] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 648.506599][T14659] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 18 03 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 e2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 648.528568][T14659] RSP: 0018:ffff888109a8f778 EFLAGS: 00010046 [ 648.534729][T14659] RAX: 0000000000000002 RBX: 0000000007470044 RCX: 0000000007470044 [ 648.542708][T14659] RDX: 0000000000000000 RSI: 0000000000000420 RDI: ffff888109a8f85c [ 648.551890][T14659] RBP: ffff888109a8f820 R08: ffffea000000000f R09: ffff88812fffa000 [ 648.564428][T14659] R10: 0000000000000002 R11: ffff8881021b5b80 R12: 0000000000000000 [ 648.574715][T14659] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 648.583388][T14659] FS: 0000000000000000(0000) GS:ffff88812fd00000(0063) knlGS:00000000f55c3b40 [ 648.593258][T14659] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 648.600552][T14659] CR2: 00000000081090b4 CR3: 000000010a56e000 CR4: 00000000001406e0 [ 648.608897][T14659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.617362][T14659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.625365][T14659] Kernel panic - not syncing: Fatal exception [ 648.632226][T14659] Kernel Offset: disabled [ 648.636585][T14659] Rebooting in 86400 seconds..