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", 0xffb, 0x6}, {&(0x7f0000001300)="12", 0x1}, {&(0x7f0000001380)='}', 0x1}], 0x0, 0x0) 21:54:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080), 0x0, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2761.653511][T10210] hfs: can't find a HFS filesystem on dev loop1 [ 2761.706015][T10212] loop3: detected capacity change from 0 to 184 [ 2761.758914][T10212] isofs_fill_super: get root inode failed [ 2761.884491][T10214] loop4: detected capacity change from 0 to 8 [ 2762.222799][ T2738] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2762.932768][T24929] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2762.984042][T24929] usb 3-1: USB disconnect, device number 88 21:54:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000012c0)={0x2c, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0}) 21:54:12 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:12 executing program 1: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000001940)) 21:54:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xfc, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 21:54:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="88001700000000000017000800", 0xd, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:12 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000713000/0x3000)=nil, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000272000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 2763.351750][T10224] loop3: detected capacity change from 0 to 184 [ 2763.391427][T10221] hfs: can't find a HFS filesystem on dev loop1 21:54:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1000}, 0x40) shutdown(r0, 0x0) [ 2763.447003][T10224] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:12 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2763.535470][T30062] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:54:12 executing program 1: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000001940)) 21:54:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="88001700000000000017000800", 0xd, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2763.962367][T24929] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2764.051812][T10232] hfs: can't find a HFS filesystem on dev loop1 [ 2764.064789][T10234] loop3: detected capacity change from 0 to 184 21:54:13 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2764.102872][T10234] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2764.223040][T24929] usb 3-1: Using ep0 maxpacket: 16 21:54:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="88001700000000000017000800", 0xd, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2764.343405][T24929] usb 3-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 2764.352901][T24929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.449183][T24929] usb 3-1: config 0 descriptor?? [ 2764.711241][T10238] loop3: detected capacity change from 0 to 184 [ 2764.719563][T24929] usb 3-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 2764.768189][T10238] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2766.562728][T24929] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 2766.575366][T24929] usb 3-1: USB disconnect, device number 89 21:54:15 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 21:54:15 executing program 0: r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:15 executing program 5: r0 = memfd_create(&(0x7f0000000380)='\xeb\x00l\x1e\xa00xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f00000002c0)}, 0x0) [ 2767.094092][T10248] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:16 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') 21:54:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809", 0x14, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:16 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) readlinkat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 21:54:16 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 21:54:16 executing program 0: r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2767.721711][T10261] loop3: detected capacity change from 0 to 184 [ 2767.790150][T10261] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:16 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r0, &(0x7f00000009c0)=""/236, 0xec) write(r1, &(0x7f0000000000)="ff0000003f955f0461", 0xffd6) 21:54:16 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1000}, 0x40) shutdown(r0, 0x0) 21:54:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809", 0x14, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:17 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/167) 21:54:17 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r0, &(0x7f00000009c0)=""/236, 0xec) write(r1, &(0x7f0000000500)='I', 0x1) 21:54:17 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2768.311681][T10273] loop3: detected capacity change from 0 to 184 [ 2768.381183][T10273] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:17 executing program 2: open(&(0x7f0000000000)='.\x00', 0x6d62a0b487c59eba, 0x0) 21:54:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8) 21:54:17 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:17 executing program 1: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000080)='./file0\x00') r1 = dup(r0) utimensat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:54:17 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:17 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 2768.951824][T10291] loop3: detected capacity change from 0 to 184 [ 2769.048320][T10291] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:18 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1000}, 0x40) shutdown(r0, 0x0) 21:54:18 executing program 5: r0 = epoll_create1(0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 21:54:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)={0x18, 0x28, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 21:54:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:18 executing program 2: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) 21:54:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @u32}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) 21:54:18 executing program 1: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "f2"}, @input_terminal={0xc}, @mixer_unit={0x5}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xe1, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 2769.743273][T10306] loop3: detected capacity change from 0 to 184 21:54:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 2769.791654][T10306] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r0, 0x80081270, &(0x7f0000001740)) [ 2769.856903][T30062] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:54:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 21:54:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a", 0x17, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2770.212609][T32210] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2770.398382][T10319] loop3: detected capacity change from 0 to 184 21:54:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 21:54:19 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/block/loop0', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) 21:54:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) [ 2770.462402][T32210] usb 2-1: Using ep0 maxpacket: 8 [ 2770.564500][T10319] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2770.604255][T32210] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2770.613588][T32210] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 225, changing to 7 [ 2770.624851][T32210] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2770.634763][T32210] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2770.645946][T32210] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2770.655938][T32210] usb 2-1: config 1 interface 1 has no altsetting 0 21:54:19 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 21:54:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a08", 0x19, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, 0x0, 0x0) [ 2771.062670][T32210] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2771.071945][T32210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.080449][T32210] usb 2-1: Product: syz [ 2771.084958][T32210] usb 2-1: Manufacturer: syz [ 2771.089706][T32210] usb 2-1: SerialNumber: syz [ 2771.198032][T10332] loop3: detected capacity change from 0 to 184 [ 2771.294526][T10332] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2771.643136][T32210] usb 2-1: USB disconnect, device number 62 [ 2771.689359][T30062] udevd[30062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 21:54:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x10}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 21:54:21 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) 21:54:21 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 21:54:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, 0x0, 0x0) 21:54:21 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) 21:54:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a08", 0x19, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2772.112327][T10340] loop3: detected capacity change from 0 to 184 21:54:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, 0x0, 0x0) [ 2772.168185][T10340] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:21 executing program 2: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x1, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x9000) 21:54:21 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 21:54:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) 21:54:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a08", 0x19, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:21 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 21:54:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:54:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 21:54:21 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) 21:54:21 executing program 5: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/219) 21:54:21 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0xfc7d56de61829eac, 0x0) [ 2772.822605][T10357] loop3: detected capacity change from 0 to 184 [ 2772.864708][T10357] isofs_fill_super: root inode is not a directory. Corrupted media? 21:54:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:54:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 21:54:22 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = getpgid(0x0) sendmsg$netlink(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x10}, 0x10}], 0x1, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x40}, 0x0) 21:54:22 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x7f}}) 21:54:22 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x80247008, &(0x7f00000000c0)) [ 2773.325640][T10369] loop3: detected capacity change from 0 to 136 [ 2773.394388][T10369] isofs_fill_super: get root inode failed 21:54:22 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x401c5820, &(0x7f0000000140)={{0x0, 0x7f}}) 21:54:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21:54:22 executing program 4: syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x7b, "f2"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xe1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x55a3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x800}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x4, 0xf5, 0xd4, 0x8, 0x5}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x10000, 0x0, 0x7, [0x0, 0xc0, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "1ffffd887ebc39ecbe4706a59745b358"}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x800}}, {0x54, &(0x7f0000000380)=@string={0x54, 0x3, "9ee16be7e3abfd4cf26d4da3028324af6c8c7a74330c4e7eed898ce6f99c66b1562e98a9b6d5c35b43c65d275c7ae44ce0b585be8efaa6fd8022fab8c02c7be871a714dad57ef3a01b5b15f61f0deda6e82f"}}]}) 21:54:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:22 executing program 5: syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:54:22 executing program 1: semget$private(0x0, 0x1900, 0x0) 21:54:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) 21:54:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2773.980858][T10391] loop3: detected capacity change from 0 to 136 [ 2774.043061][T10391] isofs_fill_super: get root inode failed 21:54:23 executing program 1: setresuid(0xee00, 0xee00, 0xee01) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) [ 2774.153278][T24929] usb 5-1: new high-speed USB device number 13 using dummy_hcd 21:54:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2774.392360][T24929] usb 5-1: Using ep0 maxpacket: 8 21:54:23 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003880), 0x0, 0x8000) [ 2774.470238][T10405] loop3: detected capacity change from 0 to 136 [ 2774.512926][T24929] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2774.523368][T24929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2774.535348][T24929] usb 5-1: too many endpoints for config 1 interface 0 altsetting 123: 242, using maximum allowed: 30 [ 2774.547501][T24929] usb 5-1: config 1 interface 0 altsetting 123 has 0 endpoint descriptors, different from the interface descriptor's value: 242 21:54:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) sendmmsg(r0, 0x0, 0x0, 0x0) [ 2774.561312][T24929] usb 5-1: config 1 interface 0 has no altsetting 1 [ 2774.578626][T10405] isofs_fill_super: get root inode failed 21:54:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2774.848105][T24929] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2774.858420][T24929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2774.867343][T24929] usb 5-1: Product: ࠀ [ 2774.871652][T24929] usb 5-1: Manufacturer: Ы [ 2774.876407][T24929] usb 5-1: SerialNumber: ꯣ䳽淲ꍍ茂꼤豬瑺ళ繎觭鳹녦⹖ꦘ햶寃왃❝穜䳤뗠뺅搜ﶦ⊀룺Ⳁꝱ绕ꃳ嬛ടꛭ⿨ [ 2775.180396][T10413] loop3: detected capacity change from 0 to 184 [ 2775.376747][T10413] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 2775.483100][T24929] usb 5-1: 0:2 : does not exist [ 2775.534729][T24929] usb 5-1: USB disconnect, device number 13 [ 2775.642956][T30422] udevd[30422]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 21:54:24 executing program 4: syz_usb_connect$uac1(0x0, 0xb8, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "f2"}, @input_terminal={0xc}, @mixer_unit={0x5}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xe1, 0x0, 0x7, {0x7, 0x25, 0x1, 0x40, 0x40, 0x55a3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7, 0x94}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x7, 0x0, "", "19"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x7b, 0x8, "ea"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x5}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x1, 0x7f, {0x7, 0x25, 0x1, 0x80, 0x3d}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x4, 0xf5, 0xd4, 0x8}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x10000, 0x0, 0x7, [0x0, 0xc0, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "1ffffd887ebc39ecbe4706a59745b358"}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x800}}, {0x4f, &(0x7f0000000380)=@string={0x4f, 0x3, "9ee16be7e3abfd4cf26d4da3028324af6c8c7a74330c4e7eed898ce6f99c66b1562e98a9b6d5c35b43c65d275c7ae44ce0b585be8efaa6fd8022fab8c02c7be871a714dad57ef3a01b5b15f61f"}}]}) 21:54:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r0, &(0x7f00000000c0)="32935ae0b8000f24b1b13ae68505cd67a9b08a5510397808f109e57f056ab04880387e5a18ff25e30d0f53419db1c2e5bbba4375307488d2a25b0e7e94f6b4cd26f67ce575af47afc41976bc78", 0xfffffe37) write$P9_RLERRORu(r0, 0x0, 0x0) 21:54:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:54:24 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0xfffffffffffffff1) 21:54:24 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:54:24 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2776.037453][T10420] loop3: detected capacity change from 0 to 184 21:54:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 21:54:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x0, 0x0, 0x0, 0x800}, 0x48) [ 2776.205247][T10420] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2776.532710][T32210] usb 5-1: new high-speed USB device number 14 using dummy_hcd 21:54:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/116, 0xffffffffffffff69}, {&(0x7f0000000480)=""/151, 0x93}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/181}], 0x3, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x0) [ 2776.678694][T10434] loop3: detected capacity change from 0 to 184 [ 2776.772976][T32210] usb 5-1: Using ep0 maxpacket: 8 [ 2776.830381][T10434] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 2776.922963][T32210] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2776.932487][T32210] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 225, changing to 7 [ 2776.944401][T32210] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2776.954387][T32210] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2776.965541][T32210] usb 5-1: config 1 interface 1 has no altsetting 0 [ 2777.254223][T32210] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2777.263592][T32210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2777.271743][T32210] usb 5-1: Product: ࠀ [ 2777.276304][T32210] usb 5-1: Manufacturer: Ы [ 2777.280960][T32210] usb 5-1: SerialNumber: ꯣ䳽淲ꍍ茂꼤豬瑺ళ繎觭鳹녦⹖ꦘ햶寃왃❝穜䳤뗠뺅搜ﶦ⊀룺Ⳁꝱ绕ꃳ嬛 [ 2777.682759][T32210] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2777.743170][T32210] usb 5-1: USB disconnect, device number 14 [ 2777.825445][T30062] udevd[30062]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 21:54:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @restrict={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/158, 0x41, 0x9e, 0x1}, 0x20) 21:54:27 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) syz_clone(0x40021000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 21:54:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:54:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:54:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2778.198746][T10445] loop3: detected capacity change from 0 to 184 21:54:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=[{0x10}, {0x10, 0x1}], 0x20}, 0x0) 21:54:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 21:54:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) [ 2778.461152][T10445] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @restrict={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/158, 0x41, 0x9e, 0x1}, 0x20) 21:54:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 21:54:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) [ 2779.062622][T10463] loop3: detected capacity change from 0 to 184 21:54:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x803e}, {0x0}, {0x0}], 0x9, &(0x7f0000000740)=ANY=[@ANYBLOB="480000000000000029010000ff0700008c9fe4599d777552f14d673423cd7db31fbcd42801d8e77d4cb943a60306e0ea8dc8cc2954733a35cc92e31bff84ba4df324a90e0000000060"], 0xa8}, 0x0) 21:54:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=[{0x18, 0x0, 0x0, "8f"}, {0x10, 0x1}], 0x28}, 0x0) 21:54:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @restrict={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/158, 0x41, 0x9e, 0x1}, 0x20) 21:54:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) fcntl$setflags(r1, 0x2, 0x0) [ 2779.193587][T10463] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) 21:54:28 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000feb000/0x13000)=nil, 0x1000) 21:54:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @restrict={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/158, 0x41, 0x9e, 0x1}, 0x20) 21:54:28 executing program 5: getresuid(&(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000140)) 21:54:28 executing program 1: r0 = inotify_init1(0x0) dup(r0) 21:54:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 21:54:28 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$setlease(r0, 0x400, 0x0) [ 2779.821478][T10480] loop3: detected capacity change from 0 to 184 [ 2780.045176][T10480] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:29 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 21:54:29 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/79) 21:54:29 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 21:54:29 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_getparam(r0, &(0x7f0000000080)) 21:54:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:29 executing program 2: pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 21:54:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 21:54:29 executing program 1: pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) 21:54:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) [ 2780.559628][T10500] loop3: detected capacity change from 0 to 184 21:54:29 executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000001500)) 21:54:29 executing program 2: r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) [ 2780.763644][T10500] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:29 executing program 4: pipe2$9p(0x0, 0x84000) 21:54:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) 21:54:30 executing program 1: pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 21:54:30 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001340), 0x10ac83, 0x0) 21:54:30 executing program 2: syz_clone(0x0, &(0x7f0000001900)="84", 0x1, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 21:54:30 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual', 0x84002, 0x0) [ 2781.314216][T10520] loop3: detected capacity change from 0 to 184 21:54:30 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) 21:54:30 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) 21:54:30 executing program 0: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) [ 2781.565699][T10520] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 21:54:30 executing program 4: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001000)) fcntl$getown(r0, 0x9) 21:54:30 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup(r0) 21:54:30 executing program 1: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 21:54:30 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup(r0) 21:54:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000000)='.\x00', 0x80) 21:54:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) [ 2782.182513][T10544] loop3: detected capacity change from 0 to 184 21:54:31 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000001100000009000000d342c7247a299f096ac521d763dbef7d23eb95f15d53083854760000180000008400000004000000ce6cb5f50000046b0e0000009c00000029000000020000009dfd2e13dfd4a76169bb7d14fc0027e64354e6e8dee062fcffb55c86053185162999ceba6dbd843b7b07c489f686a4b21f4f3021c0feb8d5fa052dfc2e217ff5b9f8112361194da7908a78a850d411d0e075d030448dff41b9217d6ade58ea3df4e392f067b49fd33ae5626c47514e068eab25aeada8ecdc9fe4934377010b5a32d665d3cf836171ae82dd3ca94b23000401"], 0x1e0}, 0x0) 21:54:31 executing program 1: select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x2}, 0x0) 21:54:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2782.279539][T10544] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x6e) 21:54:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=0x8) 21:54:31 executing program 1: select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x4}, 0x0, 0x0) 21:54:31 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000600)=@un=@file={0xa}, 0xa) 21:54:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights, @rights], 0x20}, 0x0) [ 2782.897482][T10564] loop3: detected capacity change from 0 to 184 [ 2783.002923][T10564] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="87", 0x1}, {0x0}], 0x2, 0x0, 0xfffffe65}, 0x0) 21:54:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000380), &(0x7f0000000000)=0x6) 21:54:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000001380)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="8a", 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000100), &(0x7f0000000a40)=0xb0) 21:54:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x44004, &(0x7f0000000100), 0x80) [ 2783.583295][T10579] loop3: detected capacity change from 0 to 184 21:54:32 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x6}, 0x14) [ 2783.722706][T10579] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 21:54:32 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000002900)='\n', 0x1, 0x0, &(0x7f0000003900)={0x1c, 0x1c}, 0x1c) 21:54:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0), 0x10) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000100)={0x529}, 0x108) 21:54:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344", 0x3, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:33 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) 21:54:33 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="ec01fe540c6e", @val, {@ipv4}}, 0x0) 21:54:33 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000100), 0x10) [ 2784.308749][T10604] loop3: detected capacity change from 0 to 184 21:54:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) clock_gettime(0x0, &(0x7f00000007c0)) ppoll(&(0x7f0000000780)=[{r1}], 0x1, &(0x7f0000000800), &(0x7f0000000840)={[0x3]}, 0x8) 21:54:33 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000300)={@empty, @remote}, 0x0) 21:54:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) [ 2784.523633][T10604] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040), 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 21:54:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:33 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000240)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffff28, 0x1c, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)=0xa) 21:54:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 21:54:33 executing program 0: open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 21:54:34 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) [ 2785.152620][T10624] loop3: detected capacity change from 0 to 184 [ 2785.258862][T10624] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000000), 0xc) 21:54:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4004060, 0x0, 0x0) 21:54:34 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:34 executing program 5: pipe2(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 21:54:34 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 21:54:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="3af26c193efc176bd597b1a12ac8461aba3401f521cc937def0f852c020cca3b97d90d366d6756e52a1c217a4659095e5c4e8c2c95946e8de51e8576794d5aedd0f10ab041d75d114fb0d072bc73e1c3de986cfdcd5b87257a82f362dd1af41231186177601a7bf9e9c1bc37d61f99988d8945d2ea4aa644bc95e654913d7197b3d9c4c7f4e36f17c84deea38ad40535893eadcea85967af7c0b8803028fe2fd0214231ee3c648e764c9cb42a469537bd674d8bd2662a4c677829392149e77a065bd86136ddbe8d93f954c80b0c9c3dcc6c31ebb2b3e17183ae4d2292042951931ae27bc6e1b4096d5863e5068609e00ddf27c627ca1780047ba4f3232c7cda6c0455b7dc55b9298df23e2a4f9482fcb204763c4855c638730a7d4e38c3a586e581c41346eaa061b983069790b648e2d1a06db3dd41073b3f30ec77ae4f5daa1d20332b1b0b42c9f4f40c855c9e1ac891ea38ffeef09145a70450e9ec8febe8f218a78ec94fa255d3ae70471634a8e7748", 0x171}], 0x1}, 0x0) 21:54:34 executing program 2: pipe(0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) [ 2785.838819][T10641] loop3: detected capacity change from 0 to 184 [ 2786.007761][T10641] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:35 executing program 4: utimensat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getgid() syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x4) 21:54:35 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff43443030", 0x5, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:35 executing program 1: getitimer(0x2, &(0x7f0000000440)) [ 2786.292449][T24932] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2786.402535][T24929] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2786.490265][T24932] usb 6-1: device descriptor read/64, error 18 [ 2786.522387][T10655] loop3: detected capacity change from 0 to 184 21:54:35 executing program 1: syz_clone(0x285000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2786.592816][T24929] usb 1-1: device descriptor read/64, error 18 [ 2786.624592][T32210] usb 5-1: new high-speed USB device number 15 using dummy_hcd 21:54:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000700dd9e517600"}) syz_open_pts(r0, 0x4402) [ 2786.762884][T24932] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2786.772439][T10655] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 2786.832743][T32210] usb 5-1: device descriptor read/64, error 18 [ 2786.862411][T24929] usb 1-1: new high-speed USB device number 75 using dummy_hcd 21:54:36 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2786.952705][T24932] usb 6-1: device descriptor read/64, error 18 [ 2787.053470][T24929] usb 1-1: device descriptor read/64, error 18 [ 2787.075837][T24932] usb usb6-port1: attempt power cycle [ 2787.112734][T32210] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2787.172806][T24929] usb usb1-port1: attempt power cycle [ 2787.302941][T32210] usb 5-1: device descriptor read/64, error 18 21:54:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r0, 0x4c02, &(0x7f0000001740)) 21:54:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000100)=@raw=[@cb_func, @generic, @jmp, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000180)='GPL\x00', 0x7, 0x1000, &(0x7f0000000b00)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2787.391257][T10661] loop3: detected capacity change from 0 to 184 [ 2787.429155][T32210] usb usb5-port1: attempt power cycle [ 2787.483199][T24932] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2787.573144][T24932] usb 6-1: Invalid ep0 maxpacket: 0 [ 2787.582361][T24929] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2787.651357][T10661] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 [ 2787.683257][T24929] usb 1-1: Invalid ep0 maxpacket: 0 [ 2787.734987][T24932] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2787.832447][T24929] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2787.863509][T24932] usb 6-1: Invalid ep0 maxpacket: 0 [ 2787.869915][T24932] usb usb6-port1: unable to enumerate USB device [ 2787.882855][T32210] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2787.923298][T24929] usb 1-1: Invalid ep0 maxpacket: 0 [ 2787.929921][T24929] usb usb1-port1: unable to enumerate USB device [ 2787.983484][T32210] usb 5-1: Invalid ep0 maxpacket: 0 [ 2788.172691][T32210] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2788.260915][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 2788.268362][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 2788.280978][T32210] usb 5-1: Invalid ep0 maxpacket: 0 [ 2788.292750][T32210] usb usb5-port1: unable to enumerate USB device 21:54:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 21:54:38 executing program 0: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, 0x0) syz_open_procfs$namespace(r0, 0x0) 21:54:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x85010, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 2789.210873][T10671] loop3: detected capacity change from 0 to 184 21:54:38 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 21:54:38 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {}]}]}}, &(0x7f0000000100)=""/176, 0x36, 0xb0, 0x1}, 0x20) 21:54:38 executing program 5: unshare(0x40000800) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000640)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c23e360f350f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) [ 2789.408842][T10671] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:38 executing program 0: syz_clone(0x64006380, 0x0, 0x0, 0x0, 0x0, 0x0) 21:54:38 executing program 1: unshare(0x40000800) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000640)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c23e360f350f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 21:54:38 executing program 2: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 21:54:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:38 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@jmp, @alu={0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0xad, &(0x7f0000000200)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, 0x0}, 0x80) 21:54:38 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x6) [ 2789.990842][T10694] loop3: detected capacity change from 0 to 184 21:54:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002b00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x4, 0x0, "9a3208a361d489b1ff7301ad79d5a6fdb9c29b460356823afd5d9d3d4f09d835493ba5eecab725d7f9ef6114c0a00ecc7093286dda91ac6a2685009ca543390e2e2c6018600f5ad91dff71bf91f83514"}, 0xd8) 21:54:39 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) [ 2790.243237][T10694] isofs_fill_super: bread failed, dev=loop3, iso_blknum=46, block=92 21:54:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x400445a0, 0x0) 21:54:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:39 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/module/devres', 0x181800, 0x0) 21:54:39 executing program 4: syz_io_uring_setup(0x7b19, &(0x7f0000001200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1401, &(0x7f0000000180)={0x0, 0x89ec, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0xd22, &(0x7f0000000440), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 21:54:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x400445a0, &(0x7f00000002c0)=""/140) [ 2790.886931][T10708] loop3: detected capacity change from 0 to 184 [ 2790.997180][T10708] ISOFS: Unable to identify CD-ROM format. 21:54:41 executing program 1: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f00000001c0)="f1", 0x1) write$9p(r0, &(0x7f0000000f40)='f', 0x1) 21:54:41 executing program 5: syz_clone(0xa000080, 0x0, 0x0, 0x0, 0x0, 0x0) 21:54:41 executing program 0: syz_io_uring_setup(0x2a1f, &(0x7f0000001200), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001280), 0x0) syz_io_uring_setup(0x118b, &(0x7f0000000080)={0x0, 0xcd2b, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 21:54:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) 21:54:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:41 executing program 2: syz_clone(0x64025c80, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='+') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 2792.227637][T10725] loop3: detected capacity change from 0 to 184 21:54:41 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) timerfd_gettime(r0, 0x0) [ 2792.310042][T10725] ISOFS: Unable to identify CD-ROM format. 21:54:41 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3c}}}}}}}, 0x0) 21:54:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "3229b4fe4d26f5c9", "1d14b09ab72f4e5862132adcf1900229", "1a836985", "500c36138ed13ade"}, 0x28) 21:54:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 21:54:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:41 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fstat(r1, &(0x7f0000000200)) 21:54:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{}, {}]}) 21:54:41 executing program 4: socket(0x11, 0x800000003, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2792.790935][T10737] loop3: detected capacity change from 0 to 184 21:54:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 2792.857144][T10737] ISOFS: Unable to identify CD-ROM format. 21:54:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0xc01047d0) 21:54:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8001) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000700dd9e517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5437, 0x0) 21:54:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) 21:54:42 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0xfffc, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x182) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000001) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 21:54:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, 0x0, 0x0) 21:54:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0xb13, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 2793.446181][T10755] loop3: detected capacity change from 0 to 184 21:54:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) [ 2793.543979][T10755] ISOFS: Unable to identify CD-ROM format. 21:54:42 executing program 1: syz_emit_ethernet(0xfbf, &(0x7f00000012c0)=ANY=[@ANYBLOB="1182bec5888affffffffffff86dd60f978390f8900002ae561d81a324540fec41f8f7d05281fff"], 0x0) 21:54:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x40284504, &(0x7f00000002c0)=""/140) 21:54:42 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:42 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x4bdd, 0x0, 0x0, 0x0, 0x0) 21:54:43 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0xfffc, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x182) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000001) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 21:54:43 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0xfffc, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x182) io_submit(0x0, 0x1, &(0x7f0000000740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x2ee0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, r2}]) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)="5e8fb2bb8b8738e769423594e52c27913a7a2fce6d98007f21795c247a834ca13e1d7ae00cf4eb056c0eb09ef08f8090e40d02ef62aa1d31f7100d36dee830483671566197f8a3fd80c11f9eeb95ddab6e24b075d993e067053a00fd5e", 0x5d}, {&(0x7f0000000480)="2ad0fafd2a24795a69e42ffcce9f21ea8d741fcf1344d297e73719f47da8cd70c22de8462c3c3a5178ea09ce457be45e53a1cf4ccfcd1b10b78c08cb37ef4891aa5563ee38f72afd286d8b453dbc376ca2acad35ae3cc6ea35a9a160dbe8b0246ba19df5ec683152da9a05208001eed0e2bce267a7fda83d1b4d", 0x7a}], 0x3}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002140)=[{&(0x7f0000002000)="c717f523863f2b62e3e6f07af6ae0e34b2d7553786891f104169169b0738191267611b72c5a1912c4503644ce92697ec8cacc9f58426664ec95580db85ec3d1fe49847630d427d2ee03f870f0acfc1d07c3baa028d3627bf1ee86be944d1d5167ac0b71bf35d616d69cc2ba17f13e66933440204ef6e612f480ffedbf60c27b5a8793f2144972574359d40e8e3527d630d474027d8f5d316260d95c34e12b4a981aaf21085e8b8ce63c36dcb3d8a3392bbc4d3f3b6faf90dedb0133e85540e650756814e37d322cdd5e75633ce96023ef984b19cecdce1ee1d6a9a1b43d54f2394ffdea8d370285cd5b48dceaecfdb965c6bb970af", 0xf5}, {&(0x7f0000002100)="b93a35308be28868", 0x8}], 0x2, &(0x7f00000021c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60, 0x20004044}}, {{0x0, 0x0, &(0x7f0000002600)=[{0x0}], 0x1}}], 0x3, 0x4000001) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 21:54:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 21:54:43 executing program 0: bpf$MAP_CREATE(0x9, 0x0, 0x49) [ 2794.185902][T10770] loop3: detected capacity change from 0 to 184 [ 2794.338172][T10770] ISOFS: Unable to identify CD-ROM format. 21:54:43 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x6}]}}, &(0x7f00000003c0)=""/183, 0x26, 0xb7, 0x1}, 0x20) 21:54:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:43 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0xfffc, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x182) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000001) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 21:54:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32]) 21:54:43 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000200000140600fe80000002fb9c000022eb93e1592ed59d"], 0x0) [ 2794.849503][T10787] loop3: detected capacity change from 0 to 184 21:54:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000300)) 21:54:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) io_uring_enter(r5, 0x36ac, 0x2948, 0x1, &(0x7f0000000380), 0x8) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1a, 0x6ca6, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x40, 0x3, 0x3}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x54, 0x66, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x7, 0xf}, {0xa, 0xfff3}, {0xc, 0xd}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x86}, {0x8}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40000) io_uring_enter(r2, 0x4bdd, 0x9573, 0x1, &(0x7f0000000000)={[0x9]}, 0x8) [ 2794.895783][T10787] ISOFS: Unable to identify CD-ROM format. 21:54:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @broadcast}, 0x0, {}, 'veth0_virt_wifi\x00'}) [ 2795.312956][T10797] loop3: detected capacity change from 0 to 184 [ 2795.349224][T10797] ISOFS: Unable to identify CD-ROM format. 21:54:44 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000040)="b6", 0x0}, 0x20) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 21:54:44 executing program 5: r0 = getpgid(0x0) prlimit64(r0, 0x9, &(0x7f00000000c0), &(0x7f0000000100)) 21:54:44 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0xfffc, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r2, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x182) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000001) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 21:54:44 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) clock_gettime(0x1, &(0x7f0000000100)) 21:54:44 executing program 2: socket(0x11, 0x800000003, 0x0) pipe(&(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0x4000020000000005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x126) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x44) sendfile(r2, r2, &(0x7f0000000700), 0x7fff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[], 0x44) sendfile(r3, r3, &(0x7f0000000700), 0x8) creat(&(0x7f0000000000)='./bus\x00', 0x0) fanotify_init(0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x420000, 0x0) [ 2795.797683][T10808] loop3: detected capacity change from 0 to 184 21:54:44 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2795.863475][T10808] ISOFS: Unable to identify CD-ROM format. [ 2795.869956][T10810] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.1'. 21:54:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[], 0x2e0}, 0x0) 21:54:45 executing program 5: syz_clone(0x40000000, &(0x7f0000000040)="d8f024ee267f9b405eb4d1920bb93522ae8ab4eda5d2d1ee57e5e60f0ac081b2bbd31291c662a19b05e4f8a4cd597111a6ab102c78e689d8a23935cdcd9405a0349549c91f1f439ba41503f847b01a871396b7d17beb42a64d8879178851b87145444f5f71dbb6a628a1fb55db40a26fc0b6e023dd1ed63d5fa8fd31e399017874576996f53d8f86df4eb14a9d4e39c247def178d5c8375dbfb61eedb186a94ea971e20800a3f2994b6ecd9bf1a1dad4aafccd486259c3d5c695833bffd1a76e173b37", 0xc3, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="170fd6f942568200012cb1bd3e7073cb7da3cf2a88a7ee82c3c561d173bc1e3260736fbfb5e29407ac1353c7bd1dec0c3eb09674d27d801a4a572f0e44650e45d65fe1a5ac02dcd96c7c54dfab13848d25118857b801c192e0b90a40ec8bfd5f6e4c72d59cc1ecbd3f4ea081f1980df9ede686b8aec98ae949a634e11b7f420a588e00adda9727e09f071dfcec33f693f517666ebf9ab5439514ea6c59de0b294f316f96efd00d07b80064c3b6ac993829de9873301107e34c0691701aac3f410c12b938") 21:54:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00'}) [ 2796.474914][T10822] loop3: detected capacity change from 0 to 184 21:54:45 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 2796.531694][T10822] ISOFS: Unable to identify CD-ROM format. 21:54:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r2 = syz_clone(0x40080000, &(0x7f0000000180)="f7eafd7c0f3065cb921d9eba4e2723b1e4e276cfae7cde69d1411dd8b9fb29719c7377f06898be7b26b504eed03df3810b5434a0258dea73c1f751705038c562458fa596df5632632e9d3a92a2b60ac9b81c0f16b4b91ff4e4b678cb154ad6f5a40867c3c49a30c3fd9e5023", 0x6c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="5a529bf363c01406c69ed76179717b3ac61bb31b8a5585c9b17660f12aaf76df43f0be5b5e719bff22a2403421") r3 = getpgrp(r2) syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/ipc\x00') r4 = getpgrp(0x0) r5 = getpgrp(0x0) setpgid(r4, r5) open$dir(&(0x7f00000004c0)='./file0\x00', 0x8000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 21:54:45 executing program 4: rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x8) 21:54:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:45 executing program 2: openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:54:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = syz_clone(0x40080000, &(0x7f0000000180)="f7eafd7c0f3065cb921d9eba4e2723b1e4e276cfae7cde69d1411dd8b9fb29719c7377f06898be7b26b504eed03df3810b5434a0258dea73c1f751705038c562458fa596df5632632e9d3a92a2b60ac9b8", 0x51, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) syz_open_procfs$namespace(r1, 0x0) r2 = getpgrp(r1) syz_open_procfs$namespace(r2, &(0x7f0000000300)='ns/ipc\x00') getpgrp(0x0) getpgrp(r2) open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0xc) 21:54:46 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000002440), 0x8781, 0x0) [ 2797.132917][T10835] loop3: detected capacity change from 0 to 184 [ 2797.154004][T10835] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:54:46 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') 21:54:46 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:46 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000000c0), 0x10) 21:54:46 executing program 0: r0 = syz_clone(0x40080000, &(0x7f0000000180)="f7eafd7c0f3065cb921d9eba4e2723b1e4e276cfae7cde69d1411dd8b9fb29719c7377f06898be7b26b504eed03df3810b5434a0258dea73c1f751705038c562458fa596df5632632e9d3a92a2b60ac9b81c0f16b4b91ff4e4b678cb154ad6f5a40867c3c49a", 0x66, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="5a529bf363c01406c69ed76179717b3ac61bb31b8a5585c9b17660f12aaf76df43f0be5b5e719bff") r1 = getpgrp(r0) getpgrp(r1) [ 2797.740415][T10850] loop3: detected capacity change from 0 to 184 21:54:46 executing program 2: bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x40080000, &(0x7f0000000180), 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x0) r1 = getpgrp(r0) getpgrp(r1) 21:54:46 executing program 1: syz_open_dev$dri(&(0x7f0000000d80), 0x0, 0x0) 21:54:46 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000001c0)={0x1}) [ 2797.837065][T10850] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:54:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000", 0x50, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:47 executing program 5: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 21:54:47 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) [ 2798.457697][T10864] loop3: detected capacity change from 0 to 184 [ 2798.529356][T10864] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:54:49 executing program 4: io_uring_setup(0x7798, &(0x7f0000001c80)={0x0, 0x0, 0x2}) 21:54:49 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0, 0x3a}) 21:54:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:49 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 21:54:49 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) 21:54:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_clone(0x48224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 2800.297911][T10878] loop3: detected capacity change from 0 to 184 21:54:49 executing program 0: getitimer(0x1, &(0x7f0000000200)) 21:54:49 executing program 2: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 2800.509655][T10878] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 2800.532891][T24929] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2800.572780][T32210] usb 2-1: new high-speed USB device number 63 using dummy_hcd 21:54:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x10, 0x140e, 0x4}, 0x10}}, 0x0) 21:54:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2800.772574][T24929] usb 6-1: Using ep0 maxpacket: 8 21:54:49 executing program 0: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x10, &(0x7f00000005c0)) [ 2800.813861][T32210] usb 2-1: Using ep0 maxpacket: 8 [ 2800.893019][T24929] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 2800.901512][T24929] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 2800.910406][T24929] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2800.919786][T24929] usb 6-1: config 250 has no interface number 0 [ 2800.926290][T24929] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2800.938312][T24929] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2800.949039][T24929] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 2800.960359][T32210] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 2800.960486][T32210] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 2800.960636][T32210] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 21:54:50 executing program 4: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 2800.960759][T32210] usb 2-1: config 250 has no interface number 0 [ 2800.960873][T32210] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2800.961033][T32210] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2800.961175][T32210] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 2800.961317][T32210] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2800.961469][T32210] usb 2-1: config 250 interface 228 has no altsetting 0 [ 2801.049679][T24929] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2801.063540][T24929] usb 6-1: config 250 interface 228 has no altsetting 0 [ 2801.143900][T32210] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2801.153255][T32210] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2801.161711][T32210] usb 2-1: Product: syz [ 2801.166143][T32210] usb 2-1: SerialNumber: syz 21:54:50 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) [ 2801.314204][T10879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2801.349101][T10898] loop3: detected capacity change from 0 to 184 [ 2801.387827][T10898] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 2801.416520][T10879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2801.476123][T32210] hub 2-1:250.228: bad descriptor, ignoring hub [ 2801.482792][T32210] hub: probe of 2-1:250.228 failed with error -5 21:54:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="cc", 0x1}], 0x1, &(0x7f00000003c0)=[@sndinfo={0x20}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x40}, 0x0) 21:54:50 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200"/120, 0x78, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2801.717820][T32210] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 63 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2801.931840][T10905] loop3: detected capacity change from 0 to 184 [ 2802.003688][T24929] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2802.013239][T24929] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2802.021755][T24929] usb 6-1: Product: syz [ 2802.026203][T24929] usb 6-1: SerialNumber: syz [ 2802.037714][ T4722] usb 2-1: USB disconnect, device number 63 [ 2802.038747][T10905] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 2802.083851][ T4722] usblp0: removed [ 2802.144344][T10874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2802.151554][T10874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2802.225544][T24929] hub 6-1:250.228: bad descriptor, ignoring hub [ 2802.231947][T24929] hub: probe of 6-1:250.228 failed with error -5 [ 2802.437414][T24929] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 66 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2802.522318][ T4722] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2802.772325][ T4722] usb 2-1: Using ep0 maxpacket: 8 [ 2802.893477][ T4722] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 2802.901954][ T4722] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 2802.910667][ T4722] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2802.919999][ T4722] usb 2-1: config 250 has no interface number 0 [ 2802.926484][ T4722] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2802.938429][ T4722] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2802.949117][ T4722] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 2802.959920][ T4722] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2802.973657][ T4722] usb 2-1: config 250 interface 228 has no altsetting 0 [ 2803.115513][ T4722] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2803.125028][ T4722] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2803.133718][ T4722] usb 2-1: Product: syz [ 2803.138051][ T4722] usb 2-1: SerialNumber: syz [ 2803.159939][T10906] usb 6-1: reset high-speed USB device number 66 using dummy_hcd [ 2803.184667][T10879] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2803.191858][T10879] raw-gadget gadget: fail, usb_ep_enable returned -22 21:54:52 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "f6a8b58eb3cf4b07223e2f391325a1cd36d949e93662279058cc1305ea0c21e7576f89292a0a7a93ac39ff63f7a786633e4f72e704a078512d5f7b8e9bd1dcc9"}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 21:54:52 executing program 0: r0 = io_uring_setup(0x7e80, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 2803.302952][ T4722] usb 2-1: can't set config #250, error -71 [ 2803.344566][ T4722] usb 2-1: USB disconnect, device number 64 [ 2803.422970][T10906] usb 6-1: Using ep0 maxpacket: 8 [ 2803.564442][T10907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2803.571653][T10907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2803.834101][T10874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2803.841292][T10874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2803.902224][ C0] usblp0: nonzero read bulk status received: -71 [ 2804.093159][T32210] usb 6-1: USB disconnect, device number 66 [ 2804.105668][T32210] usblp0: removed 21:54:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40142, 0x0) write$sequencer(r0, &(0x7f0000005a80)=[@s={0x5, @generic, 0x11}, @v={0x93, 0x0, 0x90}, @raw={0xfe, 0x0, "c75479371664"}], 0x14) 21:54:53 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140)}, 0x20) r1 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d2) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ftruncate(r4, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x90, r2}) 21:54:53 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:53 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[{0x10}, {0x10}, {0x10}], 0x30}, 0x0) 21:54:53 executing program 5: syslog(0x4, &(0x7f0000000280)=""/102400, 0x19000) 21:54:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xe7c, 0x8, 0x0, 0x1, [{0x570, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x56c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}, {0x544, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31b81367ad84048e685607b2bcfb39b6f07ceff0052c531b4827ba372e5f9462"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6ea47fd6449b502e1051c67711e7fc89bf2795734627fccc79a704bd8feba7df"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f530b24c7889cb5e67a9c401696a0492adb68af3041b65cd22b418df1900ac64"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x490, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db9bf173b90c22e0e98d58c46133bd6a31dad5e89a5cbeca627f9c27e6be9d8b"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "57758e6b6d877ec598143af7c804d01a5dd07bc183feb48425e340c9fb675c4a"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "52f329237713d0c094ba551889cd3beb2c4b797d13daafac820f3408a07c8103"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd92526aab648b4e7f68a1a5333d4c82ac4c2f4e04714be3c4c02663e48cad73"}]}, {0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x278, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0xec4}}, 0x0) [ 2804.677153][T10919] loop3: detected capacity change from 0 to 184 [ 2804.733625][ T24] audit: type=1800 audit(1650664493.766:69): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1175 res=0 errno=0 21:54:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0xe98, 0x8, 0x0, 0x1, [{0x570, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x56c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x544, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31b81367ad84048e685607b2bcfb39b6f07ceff0052c531b4827ba372e5f9462"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6ea47fd6449b502e1051c67711e7fc89bf2795734627fccc79a704bd8feba7df"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f530b24c7889cb5e67a9c401696a0492adb68af3041b65cd22b418df1900ac64"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x490, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db9bf173b90c22e0e98d58c46133bd6a31dad5e89a5cbeca627f9c27e6be9d8b"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "57758e6b6d877ec598143af7c804d01a5dd07bc183feb48425e340c9fb675c4a"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "52f329237713d0c094ba551889cd3beb2c4b797d13daafac820f3408a07c8103"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd92526aab648b4e7f68a1a5333d4c82ac4c2f4e04714be3c4c02663e48cad73"}]}, {0x2a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 21:54:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @empty}}}}) [ 2804.811852][T10919] isofs_fill_super: get root inode failed 21:54:54 executing program 1: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/4096) [ 2804.903148][ T24] audit: type=1800 audit(1650664493.916:70): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1164 res=0 errno=0 21:54:54 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:54 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140)}, 0x20) r1 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d2) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ftruncate(r4, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x90, r2}) 21:54:54 executing program 1: r0 = syz_clone(0x4900d100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) 21:54:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 2805.615714][T10936] loop3: detected capacity change from 0 to 184 [ 2805.692436][ T24] audit: type=1800 audit(1650664494.716:71): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 2805.776452][T10936] isofs_fill_super: get root inode failed 21:54:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, 0x1, 0x1, 0x3}, 0x14}}, 0x0) 21:54:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(sm4-generic)\x00'}, 0x58) [ 2805.954019][ T24] audit: type=1800 audit(1650664494.986:72): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1162 res=0 errno=0 21:54:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x8c, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:55 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f0000000440)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 21:54:55 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140)}, 0x20) r1 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d2) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ftruncate(r4, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x90, r2}) 21:54:55 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x8001}) [ 2806.606068][T10958] loop3: detected capacity change from 0 to 184 21:54:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x3}, {0x6}]}) [ 2806.750764][T10958] isofs_fill_super: get root inode failed [ 2806.861096][ T24] audit: type=1800 audit(1650664495.886:73): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1166 res=0 errno=0 21:54:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2807.014651][ T24] audit: type=1800 audit(1650664496.006:74): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1167 res=0 errno=0 21:54:56 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000600)) 21:54:56 executing program 0: socketpair(0xa, 0x2, 0x3, &(0x7f0000000040)) 21:54:56 executing program 4: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46900) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140)}, 0x20) r1 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d2) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ftruncate(r4, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x90, r2}) [ 2807.296265][ T24] audit: type=1326 audit(1650664496.326:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fed549 code=0x0 21:54:56 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}]}) [ 2807.383199][T10972] loop3: detected capacity change from 0 to 184 21:54:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x9b, &(0x7f00000000c0)={0x5, 0xf, 0x9b, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xbbb, 0x0, 0x0, [0x0, 0xdded294561002e8d]}, @generic={0x82, 0x10, 0x2, "8e77ddb967a07b0b71f8508ec79e082f19c272cc012ec7d94f279b179e935c2add2bfbae0fd9bb4508020fbf971a564cbbcb7c75f991183d0821686eaf6b161e9ddb7a8185faf94610d528829213e48f77c0fd443717406cd5200b024b93d3813cedd51fcb675f6649c815cf598fadcb89ed2f3e52ea2850504d4b8e90f427"}]}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2807.480321][T10972] isofs_fill_super: get root inode failed 21:54:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2807.851171][T10983] loop5: detected capacity change from 0 to 6 [ 2807.872561][ T24] audit: type=1800 audit(1650664496.896:76): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 2807.951586][T10983] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 21:54:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 2808.038682][T10983] FAT-fs (loop5): Directory bread(block 6) failed [ 2808.051585][ T24] audit: type=1800 audit(1650664497.076:77): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1179 res=0 errno=0 [ 2808.073937][T32210] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2808.173509][T10989] loop3: detected capacity change from 0 to 184 [ 2808.233315][T10989] isofs_fill_super: get root inode failed 21:54:57 executing program 5: syslog(0x3, &(0x7f0000000080)=""/12, 0x2000008c) [ 2808.332431][T32210] usb 3-1: Using ep0 maxpacket: 16 21:54:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000", 0x96, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2808.454114][T32210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2808.465948][T32210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2808.476028][T32210] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2808.485317][T32210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:54:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:54:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000580)=ANY=[]) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/133, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) [ 2808.735954][T32210] usb 3-1: config 0 descriptor?? 21:54:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10) [ 2808.922803][T11000] loop3: detected capacity change from 0 to 184 21:54:58 executing program 5: syslog(0x3, &(0x7f0000000080)=""/12, 0x2000008c) 21:54:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private1}, 0x1c) [ 2808.996859][T10981] UDC core: couldn't find an available UDC or it's busy: -16 [ 2809.004775][T10981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2809.034213][T11000] isofs_fill_super: get root inode failed 21:54:58 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x4, &(0x7f0000000000)=0xfff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0x6) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2809.393870][T32210] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000C/input/input115 [ 2809.481196][T32210] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000C/input/input116 [ 2809.599725][T11011] loop3: detected capacity change from 0 to 184 [ 2809.648158][T32210] kye 0003:0458:5019.000C: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 2809.675371][T11011] isofs_fill_super: get root inode failed [ 2809.721944][T32210] usb 3-1: USB disconnect, device number 90 21:54:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x9b, &(0x7f00000000c0)={0x5, 0xf, 0x9b, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xbbb, 0x0, 0x0, [0x0, 0xdded294561002e8d]}, @generic={0x82, 0x10, 0x2, "8e77ddb967a07b0b71f8508ec79e082f19c272cc012ec7d94f279b179e935c2add2bfbae0fd9bb4508020fbf971a564cbbcb7c75f991183d0821686eaf6b161e9ddb7a8185faf94610d528829213e48f77c0fd443717406cd5200b024b93d3813cedd51fcb675f6649c815cf598fadcb89ed2f3e52ea2850504d4b8e90f427"}]}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 21:54:59 executing program 5: syslog(0x3, &(0x7f0000000080)=""/12, 0x2000008c) 21:54:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000e7ff04000000000000000015850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) times(0x0) 21:54:59 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:54:59 executing program 0: setreuid(0xee00, 0xee00) ioprio_set$uid(0x0, 0x0, 0x2004) [ 2810.265011][T11021] loop3: detected capacity change from 0 to 184 [ 2810.333419][T11013] not chained 620000 origins [ 2810.338059][T11013] CPU: 1 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2810.346853][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2810.356928][T11013] Call Trace: [ 2810.360210][T11013] [ 2810.363147][T11013] dump_stack_lvl+0x1ff/0x28e [ 2810.367875][T11013] dump_stack+0x25/0x28 [ 2810.372065][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2810.377843][T11013] ? update_misfit_status+0x2c/0xd30 [ 2810.383193][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2810.388335][T11013] ? switch_mm_irqs_off+0xc5/0xc60 [ 2810.393488][T11013] ? filter_irq_stacks+0xb5/0x230 [ 2810.398551][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2810.403694][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2810.409544][T11013] ? should_fail+0x75/0x9c0 [ 2810.414094][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2810.419246][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2810.425546][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2810.431664][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2810.436807][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2810.442653][T11013] __msan_chain_origin+0xbf/0x140 [ 2810.447731][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.452899][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.457879][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2810.462776][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.467318][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2810.472493][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2810.477652][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2810.482805][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2810.489107][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.495659][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.500395][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.506778][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.511846][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.516738][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.521280][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.527655][T11013] RIP: 0023:0xf7f94549 [ 2810.531742][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2810.551410][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2810.559877][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2810.567868][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2810.575857][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2810.583845][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2810.591831][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2810.599835][T11013] [ 2810.605923][T11013] Uninit was stored to memory at: [ 2810.611035][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.616552][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.621542][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.626190][T11013] __sys_recvmmsg+0x51c/0x6f0 21:54:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4b04f7f0, 0x0) close(r0) [ 2810.630914][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.637399][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.642563][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.647457][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.652127][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.658512][T11013] [ 2810.660839][T11013] Uninit was stored to memory at: [ 2810.666032][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.671189][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.676259][T11013] do_recvmmsg+0xd77/0x2120 21:54:59 executing program 5: syslog(0x3, &(0x7f0000000080)=""/12, 0x2000008c) [ 2810.680829][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.685643][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.692127][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.697197][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.702175][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.706725][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.713199][T11013] [ 2810.715526][T11013] Uninit was stored to memory at: [ 2810.720614][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.725876][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.730866][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.735526][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.740246][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.746718][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.751786][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.753223][T11021] isofs_fill_super: get root inode failed [ 2810.756766][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.756823][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.756883][T11013] [ 2810.756892][T11013] Uninit was stored to memory at: [ 2810.756966][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.786141][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.791124][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.795779][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.800518][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.807057][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.812214][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.817112][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.821653][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.828195][T11013] [ 2810.830545][T11013] Uninit was stored to memory at: [ 2810.835795][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.840957][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.846110][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.850654][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.855527][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.861911][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.867145][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.872128][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.876686][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.883231][T11013] [ 2810.885559][T11013] Uninit was stored to memory at: [ 2810.890660][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.895967][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.900964][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.905670][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.910414][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.916941][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.922121][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.927032][T11013] do_SYSENTER_32+0x1b/0x20 [ 2810.931582][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.938117][T11013] [ 2810.940449][T11013] Uninit was stored to memory at: [ 2810.945688][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2810.950851][T11013] get_compat_msghdr+0x108/0x2c0 [ 2810.955995][T11013] do_recvmmsg+0xd77/0x2120 [ 2810.960555][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2810.965458][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2810.971840][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2810.977073][T11013] do_fast_syscall_32+0x34/0x70 [ 2810.981974][T11013] do_SYSENTER_32+0x1b/0x20 21:55:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000", 0x9b, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2810.986678][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2810.993202][T11013] [ 2810.995551][T11013] Local variable msg_sys created at: [ 2811.000837][T11013] do_recvmmsg+0xbb/0x2120 [ 2811.005460][T11013] __sys_recvmmsg+0x51c/0x6f0 21:55:00 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) [ 2811.288355][T11028] loop3: detected capacity change from 0 to 184 21:55:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) 21:55:00 executing program 5: syslog(0x0, &(0x7f0000000080)=""/12, 0x2000008c) [ 2811.432574][T32210] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2811.470201][T11028] isofs_fill_super: get root inode failed [ 2811.682471][T32210] usb 3-1: Using ep0 maxpacket: 16 [ 2811.802790][T32210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2811.815499][T32210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2811.826381][T32210] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2811.835835][T32210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2812.010354][T32210] usb 3-1: config 0 descriptor?? [ 2812.256096][T11024] UDC core: couldn't find an available UDC or it's busy: -16 [ 2812.263760][T11024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2812.419927][T11013] not chained 630000 origins [ 2812.426380][T11013] CPU: 1 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2812.435194][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2812.445271][T11013] Call Trace: [ 2812.448572][T11013] [ 2812.451519][T11013] dump_stack_lvl+0x1ff/0x28e [ 2812.456251][T11013] dump_stack+0x25/0x28 [ 2812.460454][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2812.466241][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2812.472378][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2812.477533][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2812.483398][T11013] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2812.489005][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2812.494154][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2812.500006][T11013] ? should_fail+0x75/0x9c0 [ 2812.504550][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2812.509703][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2812.516007][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2812.522143][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2812.527294][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2812.533142][T11013] __msan_chain_origin+0xbf/0x140 [ 2812.538226][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.543409][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.548393][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2812.553295][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.557848][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2812.563030][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2812.568202][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2812.573335][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2812.579639][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.586199][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.590924][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.597298][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2812.602379][T11013] do_fast_syscall_32+0x34/0x70 [ 2812.607276][T11013] do_SYSENTER_32+0x1b/0x20 [ 2812.611815][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2812.618177][T11013] RIP: 0023:0xf7f94549 [ 2812.622265][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2812.642004][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2812.650474][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2812.658483][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2812.666485][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2812.674484][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2812.682483][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2812.690493][T11013] [ 2812.696266][T11013] Uninit was stored to memory at: [ 2812.701377][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.706985][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.711983][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.716636][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.721365][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.727844][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2812.733012][T11013] do_fast_syscall_32+0x34/0x70 [ 2812.737922][T11013] do_SYSENTER_32+0x1b/0x20 [ 2812.742611][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2812.748995][T11013] [ 2812.751329][T11013] Uninit was stored to memory at: [ 2812.756594][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.761752][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.766867][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.771420][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.776296][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.782781][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2812.787852][T11013] do_fast_syscall_32+0x34/0x70 [ 2812.792890][T11013] do_SYSENTER_32+0x1b/0x20 [ 2812.797442][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2812.803965][T11013] [ 2812.806295][T11013] Uninit was stored to memory at: [ 2812.811383][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.816664][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.821652][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.826382][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.831109][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.837642][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2812.842805][T11013] do_fast_syscall_32+0x34/0x70 [ 2812.847704][T11013] do_SYSENTER_32+0x1b/0x20 [ 2812.852399][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2812.858782][T11013] [ 2812.861111][T11013] Uninit was stored to memory at: [ 2812.866308][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.871464][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.876574][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.881125][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.885960][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.892486][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2812.897556][T11013] do_fast_syscall_32+0x34/0x70 [ 2812.902599][T11013] do_SYSENTER_32+0x1b/0x20 [ 2812.907232][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2812.913749][T11013] [ 2812.916088][T11013] Uninit was stored to memory at: [ 2812.921168][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.926457][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.931440][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.936157][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.940882][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2812.947418][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2812.952584][T11013] do_fast_syscall_32+0x34/0x70 [ 2812.957486][T11013] do_SYSENTER_32+0x1b/0x20 [ 2812.962178][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2812.968564][T11013] [ 2812.970894][T11013] Uninit was stored to memory at: [ 2812.976102][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2812.981261][T11013] get_compat_msghdr+0x108/0x2c0 [ 2812.986378][T11013] do_recvmmsg+0xd77/0x2120 [ 2812.990932][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2812.995938][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.002410][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.007484][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.012526][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.017074][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.023589][T11013] [ 2813.025923][T11013] Uninit was stored to memory at: [ 2813.031002][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.036275][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.041257][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.045954][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.050686][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.057222][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.062388][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.067285][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.071808][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.078287][T11013] [ 2813.080620][T11013] Local variable msg_sys created at: [ 2813.086057][T11013] do_recvmmsg+0xbb/0x2120 [ 2813.090521][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.126884][T32210] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000D/input/input117 [ 2813.218504][T32210] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000D/input/input118 [ 2813.288357][T32210] kye 0003:0458:5019.000D: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 2813.331962][T32210] usb 3-1: USB disconnect, device number 91 [ 2813.440107][T11013] not chained 640000 origins [ 2813.446758][T11013] CPU: 1 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2813.455565][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2813.465652][T11013] Call Trace: [ 2813.468956][T11013] [ 2813.471905][T11013] dump_stack_lvl+0x1ff/0x28e [ 2813.476642][T11013] dump_stack+0x25/0x28 [ 2813.480844][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2813.486631][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2813.492765][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2813.497918][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2813.503773][T11013] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2813.509382][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2813.514540][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2813.520395][T11013] ? should_fail+0x75/0x9c0 [ 2813.524952][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2813.530103][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2813.536410][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2813.542548][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2813.547709][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2813.553562][T11013] __msan_chain_origin+0xbf/0x140 [ 2813.558650][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.563828][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.568821][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2813.573737][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.578297][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2813.583482][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2813.588663][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2813.593821][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2813.600128][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.606774][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.611489][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.617868][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.622953][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.627855][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.632388][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.638772][T11013] RIP: 0023:0xf7f94549 [ 2813.642847][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2813.662504][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2813.670959][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2813.678949][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2813.686956][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2813.694940][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2813.702940][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2813.710945][T11013] [ 2813.714437][T11013] Uninit was stored to memory at: [ 2813.719549][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.724807][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.729789][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.734437][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.739172][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.745760][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.750840][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.755882][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.760425][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.766964][T11013] [ 2813.769304][T11013] Uninit was stored to memory at: [ 2813.774566][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.779720][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.784838][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.789399][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.794235][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.800629][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.805827][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.810724][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.815397][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.821776][T11013] [ 2813.824240][T11013] Uninit was stored to memory at: [ 2813.829341][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.834601][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.839584][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.844291][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.849022][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.855561][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.860631][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.865696][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.870247][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.876776][T11013] [ 2813.879109][T11013] Uninit was stored to memory at: [ 2813.884338][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.889491][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.894626][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.899176][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.904054][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.910442][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.915662][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.920559][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.925248][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.931627][T11013] [ 2813.934108][T11013] Uninit was stored to memory at: [ 2813.939203][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.944514][T11013] get_compat_msghdr+0x108/0x2c0 [ 2813.949497][T11013] do_recvmmsg+0xd77/0x2120 [ 2813.954196][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2813.958936][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2813.965477][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2813.970548][T11013] do_fast_syscall_32+0x34/0x70 [ 2813.975598][T11013] do_SYSENTER_32+0x1b/0x20 [ 2813.980141][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2813.986673][T11013] [ 2813.989007][T11013] Uninit was stored to memory at: [ 2813.994289][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2813.999452][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.004590][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.009134][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.014008][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.020396][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.025625][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.030532][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.035240][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.041616][T11013] [ 2814.044099][T11013] Uninit was stored to memory at: [ 2814.049193][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.054504][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.059487][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.064196][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.068928][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.075496][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.080575][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.085658][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.090223][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.096794][T11013] [ 2814.099129][T11013] Local variable msg_sys created at: [ 2814.104588][T11013] do_recvmmsg+0xbb/0x2120 [ 2814.109056][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.403172][T11013] not chained 650000 origins [ 2814.407808][T11013] CPU: 1 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2814.416587][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2814.426685][T11013] Call Trace: [ 2814.429979][T11013] [ 2814.432924][T11013] dump_stack_lvl+0x1ff/0x28e [ 2814.437648][T11013] dump_stack+0x25/0x28 [ 2814.441817][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2814.447571][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2814.453678][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2814.458820][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2814.464649][T11013] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2814.470254][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2814.475404][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2814.481253][T11013] ? should_fail+0x75/0x9c0 [ 2814.485781][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2814.490925][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2814.497199][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2814.503303][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2814.508444][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2814.514282][T11013] __msan_chain_origin+0xbf/0x140 [ 2814.519357][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.524514][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.529495][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2814.534374][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.538918][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2814.544074][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2814.549236][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2814.554361][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2814.560660][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.567191][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.571909][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.578299][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.583380][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.588276][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.592800][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.599174][T11013] RIP: 0023:0xf7f94549 [ 2814.603249][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2814.622906][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2814.631352][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2814.639332][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2814.647308][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2814.655287][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2814.663291][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2814.671295][T11013] [ 2814.676827][T11013] Uninit was stored to memory at: [ 2814.681933][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.687490][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.692572][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.697127][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.701849][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.708385][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.713558][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.718460][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.723147][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.729530][T11013] [ 2814.731843][T11013] Uninit was stored to memory at: [ 2814.737083][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.742323][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.747302][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.751828][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.756701][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.763181][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.768267][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.773318][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.777875][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.784429][T11013] [ 2814.786767][T11013] Uninit was stored to memory at: [ 2814.791874][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.797145][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.802226][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.806776][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.811476][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.818018][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.823217][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.828118][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.832800][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.839177][T11013] [ 2814.841495][T11013] Uninit was stored to memory at: [ 2814.846700][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.851859][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.856982][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.861530][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.866378][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.872856][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.877933][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.882969][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.887527][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.894074][T11013] [ 2814.896410][T11013] Uninit was stored to memory at: [ 2814.901492][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.906759][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.911746][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.916423][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.921148][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.927678][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.932845][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.937738][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.942538][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2814.948921][T11013] [ 2814.951239][T11013] Uninit was stored to memory at: [ 2814.956471][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2814.961648][T11013] get_compat_msghdr+0x108/0x2c0 [ 2814.966796][T11013] do_recvmmsg+0xd77/0x2120 [ 2814.971351][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2814.976231][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2814.982702][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2814.987780][T11013] do_fast_syscall_32+0x34/0x70 [ 2814.992844][T11013] do_SYSENTER_32+0x1b/0x20 [ 2814.997397][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.003935][T11013] [ 2815.006269][T11013] Uninit was stored to memory at: [ 2815.011351][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.016610][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.021683][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.026380][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.031122][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.037643][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.042806][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.047701][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.052366][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.058746][T11013] [ 2815.061065][T11013] Local variable msg_sys created at: [ 2815.066450][T11013] do_recvmmsg+0xbb/0x2120 [ 2815.070932][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.240568][T11013] not chained 660000 origins [ 2815.245277][T11013] CPU: 0 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2815.254062][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.264133][T11013] Call Trace: [ 2815.267407][T11013] [ 2815.270336][T11013] dump_stack_lvl+0x1ff/0x28e [ 2815.275043][T11013] dump_stack+0x25/0x28 [ 2815.279322][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2815.285086][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2815.291197][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2815.296336][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2815.302175][T11013] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2815.307787][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2815.312940][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2815.318799][T11013] ? should_fail+0x75/0x9c0 [ 2815.323348][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2815.328475][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2815.334753][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2815.340859][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2815.346000][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2815.351946][T11013] __msan_chain_origin+0xbf/0x140 [ 2815.357026][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.362206][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.367174][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2815.372052][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.376590][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2815.381825][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2815.386961][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2815.392093][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2815.398399][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.404939][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.409688][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.416095][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.421151][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.426028][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.430562][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.436935][T11013] RIP: 0023:0xf7f94549 [ 2815.441010][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2815.460644][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2815.469098][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2815.477081][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2815.485054][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2815.493033][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2815.501036][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2815.509039][T11013] [ 2815.515873][T11013] Uninit was stored to memory at: [ 2815.520986][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.526727][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.531718][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.536419][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.541143][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.547661][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.552799][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.557673][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.562493][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.568881][T11013] [ 2815.571214][T11013] Uninit was stored to memory at: [ 2815.576525][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.581683][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.586782][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.591331][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.596196][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.602676][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.607743][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.612790][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.617339][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.623867][T11013] [ 2815.626198][T11013] Uninit was stored to memory at: [ 2815.631273][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.636531][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.641509][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.646168][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.650885][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.657366][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.662535][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.667426][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.671973][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.678524][T11013] [ 2815.680858][T11013] Uninit was stored to memory at: [ 2815.686083][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.691238][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.696385][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.700942][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.705845][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.712312][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.717379][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.722448][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.727007][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.733600][T11013] [ 2815.735931][T11013] Uninit was stored to memory at: [ 2815.740997][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.746262][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.751246][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.755948][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.760674][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.767155][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.772321][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.777224][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.781745][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.788218][T11013] [ 2815.790545][T11013] Uninit was stored to memory at: [ 2815.795750][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.800904][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.806061][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.810609][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.815446][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.821827][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.827011][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.831904][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.836613][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.843079][T11013] [ 2815.845405][T11013] Uninit was stored to memory at: [ 2815.850468][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2815.855769][T11013] get_compat_msghdr+0x108/0x2c0 [ 2815.860744][T11013] do_recvmmsg+0xd77/0x2120 [ 2815.865391][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2815.870113][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2815.876644][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2815.881767][T11013] do_fast_syscall_32+0x34/0x70 [ 2815.886777][T11013] do_SYSENTER_32+0x1b/0x20 [ 2815.891326][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2815.897808][T11013] [ 2815.900154][T11013] Local variable msg_sys created at: [ 2815.905611][T11013] do_recvmmsg+0xbb/0x2120 [ 2815.910070][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.081658][T11013] not chained 670000 origins [ 2816.086410][T11013] CPU: 1 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2816.095208][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2816.105269][T11013] Call Trace: [ 2816.108568][T11013] [ 2816.111505][T11013] dump_stack_lvl+0x1ff/0x28e [ 2816.116211][T11013] dump_stack+0x25/0x28 [ 2816.120384][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2816.126141][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2816.132263][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.137408][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2816.143258][T11013] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2816.148856][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.153987][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2816.159855][T11013] ? should_fail+0x75/0x9c0 [ 2816.164375][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.169514][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2816.175787][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2816.181885][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.187012][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2816.192871][T11013] __msan_chain_origin+0xbf/0x140 [ 2816.197944][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.203098][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.208083][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2816.212961][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.217507][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2816.222667][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2816.227827][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.232953][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2816.239253][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.245785][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.250518][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.256901][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.261950][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.266828][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.271350][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.277702][T11013] RIP: 0023:0xf7f94549 [ 2816.281770][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2816.301397][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2816.309917][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2816.317913][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2816.325910][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2816.333909][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2816.341898][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2816.349887][T11013] [ 2816.357341][T11013] Uninit was stored to memory at: [ 2816.363244][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.368401][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.373480][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.378032][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.382865][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.389248][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.394425][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.399327][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.403974][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.410354][T11013] [ 2816.412820][T11013] Uninit was stored to memory at: [ 2816.417933][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.423183][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.428160][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.432836][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.437559][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.444064][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.449131][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.454153][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.458713][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.465224][T11013] [ 2816.467552][T11013] Uninit was stored to memory at: [ 2816.472729][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.477879][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.482982][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.487526][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.492350][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.498725][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.503915][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.508805][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.513475][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.519850][T11013] [ 2816.522313][T11013] Uninit was stored to memory at: [ 2816.527401][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.532678][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.537673][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.542325][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.547048][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.553552][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.558623][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.563652][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.568193][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.574700][T11013] [ 2816.577026][T11013] Uninit was stored to memory at: [ 2816.582193][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.587345][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.592433][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.596979][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.601676][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.608134][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.613292][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.618181][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.622838][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.629212][T11013] [ 2816.631538][T11013] Uninit was stored to memory at: [ 2816.636722][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.641977][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.647106][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.651649][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.656474][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.662957][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.668135][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.673160][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.677705][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.684201][T11013] [ 2816.686560][T11013] Uninit was stored to memory at: [ 2816.691649][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2816.696910][T11013] get_compat_msghdr+0x108/0x2c0 [ 2816.701892][T11013] do_recvmmsg+0xd77/0x2120 [ 2816.706584][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.711309][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2816.717767][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2816.722926][T11013] do_fast_syscall_32+0x34/0x70 [ 2816.727818][T11013] do_SYSENTER_32+0x1b/0x20 [ 2816.732501][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2816.738887][T11013] [ 2816.741204][T11013] Local variable msg_sys created at: [ 2816.746591][T11013] do_recvmmsg+0xbb/0x2120 [ 2816.751048][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2816.923442][T11013] not chained 680000 origins [ 2816.929697][T11013] CPU: 1 PID: 11013 Comm: syz-executor.1 Not tainted 5.18.0-rc3-syzkaller #0 [ 2816.938500][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2816.948576][T11013] Call Trace: [ 2816.951854][T11013] [ 2816.954788][T11013] dump_stack_lvl+0x1ff/0x28e [ 2816.959504][T11013] dump_stack+0x25/0x28 [ 2816.963679][T11013] kmsan_internal_chain_origin+0x78/0x120 [ 2816.969433][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2816.975534][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.980687][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2816.986538][T11013] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2816.992152][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2816.997300][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2817.003147][T11013] ? should_fail+0x75/0x9c0 [ 2817.007757][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2817.012897][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2817.019170][T11013] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2817.025274][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2817.030421][T11013] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2817.036271][T11013] __msan_chain_origin+0xbf/0x140 [ 2817.041353][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.046506][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.051467][T11013] ? __sys_recvmmsg+0x51c/0x6f0 [ 2817.056343][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.060879][T11013] ? ___bpf_prog_run+0xb34b/0xb420 [ 2817.066026][T11013] ? __stack_depot_save+0x21/0x4b0 [ 2817.071169][T11013] ? kmsan_get_metadata+0x33/0x220 [ 2817.076301][T11013] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2817.082603][T11013] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.089133][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.093844][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.100211][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.105259][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.110129][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.114652][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.121005][T11013] RIP: 0023:0xf7f94549 [ 2817.125080][T11013] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2817.144743][T11013] RSP: 002b:00000000f7f6e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2817.153171][T11013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2817.161246][T11013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2817.169218][T11013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2817.177199][T11013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2817.185194][T11013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2817.193192][T11013] [ 2817.198906][T11013] Uninit was stored to memory at: [ 2817.204365][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.209524][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.214629][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.219177][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.224022][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.230405][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.235575][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.240467][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.245129][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.251511][T11013] [ 2817.253966][T11013] Uninit was stored to memory at: [ 2817.259091][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.264349][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.269331][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.274049][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.278779][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.285294][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.290370][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.295430][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.299978][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.306537][T11013] [ 2817.308865][T11013] Uninit was stored to memory at: [ 2817.314064][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.319213][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.324344][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.328902][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.333862][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.340246][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.345442][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.350342][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.354991][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.361386][T11013] [ 2817.363829][T11013] Uninit was stored to memory at: [ 2817.368912][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.374167][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.379162][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.383847][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.388572][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.395069][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.400141][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.405165][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.409706][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.416202][T11013] [ 2817.418536][T11013] Uninit was stored to memory at: [ 2817.423757][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.428909][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.434000][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.438555][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.443393][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.449771][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.454946][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.459841][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.464569][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.470947][T11013] [ 2817.473384][T11013] Uninit was stored to memory at: [ 2817.478475][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.483801][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.488783][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.493437][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.498161][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.504718][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.509784][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.514795][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.519348][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.525834][T11013] [ 2817.528158][T11013] Uninit was stored to memory at: [ 2817.533343][T11013] __get_compat_msghdr+0x6e1/0x9d0 [ 2817.538495][T11013] get_compat_msghdr+0x108/0x2c0 [ 2817.543588][T11013] do_recvmmsg+0xd77/0x2120 [ 2817.548132][T11013] __sys_recvmmsg+0x51c/0x6f0 [ 2817.552967][T11013] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2817.559350][T11013] __do_fast_syscall_32+0x96/0xf0 [ 2817.564616][T11013] do_fast_syscall_32+0x34/0x70 [ 2817.569515][T11013] do_SYSENTER_32+0x1b/0x20 [ 2817.574240][T11013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2817.580634][T11013] [ 2817.583140][T11013] Local variable msg_sys created at: [ 2817.588427][T11013] do_recvmmsg+0xbb/0x2120 [ 2817.593054][T11013] __sys_recvmmsg+0x51c/0x6f0 21:55:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001180)={0x0, 0x0}) 21:55:06 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002200000000000022000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:06 executing program 4: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 21:55:06 executing program 5: syslog(0x0, &(0x7f0000000080)=""/12, 0x2000008c) 21:55:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x9b, &(0x7f00000000c0)={0x5, 0xf, 0x9b, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xbbb, 0x0, 0x0, [0x0, 0xdded294561002e8d]}, @generic={0x82, 0x10, 0x2, "8e77ddb967a07b0b71f8508ec79e082f19c272cc012ec7d94f279b179e935c2add2bfbae0fd9bb4508020fbf971a564cbbcb7c75f991183d0821686eaf6b161e9ddb7a8185faf94610d528829213e48f77c0fd443717406cd5200b024b93d3813cedd51fcb675f6649c815cf598fadcb89ed2f3e52ea2850504d4b8e90f427"}]}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 21:55:06 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x372d, 0x4) 21:55:06 executing program 5: syslog(0x0, &(0x7f0000000080)=""/12, 0x2000008c) 21:55:06 executing program 0: setreuid(0xee00, 0xee00) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) setreuid(r0, 0x0) [ 2817.876772][T11048] loop3: detected capacity change from 0 to 184 21:55:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x4, 0x4}, 0x48) sendmmsg$unix(r0, &(0x7f0000000480)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) [ 2817.939185][T11048] isofs_fill_super: get root inode failed 21:55:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002200000000000022000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x7}, [@RTA_OIF={0x8}, @RTA_PREF={0x5}]}, 0x2c}}, 0x0) [ 2818.132640][T32210] usb 3-1: new high-speed USB device number 92 using dummy_hcd 21:55:07 executing program 5: syslog(0x3, 0x0, 0x0) 21:55:07 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f0000000d00)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000004) [ 2818.372829][T32210] usb 3-1: Using ep0 maxpacket: 16 21:55:07 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="b6", 0x1}], 0x1}, 0x0) [ 2818.461237][T11062] loop3: detected capacity change from 0 to 184 [ 2818.483542][T11063] IPv6: NLM_F_CREATE should be specified when creating new route [ 2818.491604][T11063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2818.499092][T11063] IPv6: NLM_F_CREATE should be set when creating new route [ 2818.507888][T32210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2818.519280][T32210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2818.529484][T32210] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2818.538940][T32210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2818.541359][T11062] isofs_fill_super: get root inode failed [ 2818.635468][T32210] usb 3-1: config 0 descriptor?? 21:55:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002200000000000022000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181300000000000000000000150000000022", 0x9d, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x0) 21:55:07 executing program 5: syslog(0x3, 0x0, 0x0) [ 2818.876928][T11049] UDC core: couldn't find an available UDC or it's busy: -16 [ 2818.885418][T11049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2819.317094][T32210] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000E/input/input119 [ 2819.420094][T32210] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000E/input/input120 [ 2819.461477][T11075] loop3: detected capacity change from 0 to 184 [ 2819.559984][T11075] isofs_fill_super: get root inode failed [ 2819.568515][T32210] kye 0003:0458:5019.000E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 2819.616193][T32210] usb 3-1: USB disconnect, device number 92 21:55:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x9b, &(0x7f00000000c0)={0x5, 0xf, 0x9b, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xbbb, 0x0, 0x0, [0x0, 0xdded294561002e8d]}, @generic={0x82, 0x10, 0x2, "8e77ddb967a07b0b71f8508ec79e082f19c272cc012ec7d94f279b179e935c2add2bfbae0fd9bb4508020fbf971a564cbbcb7c75f991183d0821686eaf6b161e9ddb7a8185faf94610d528829213e48f77c0fd443717406cd5200b024b93d3813cedd51fcb675f6649c815cf598fadcb89ed2f3e52ea2850504d4b8e90f427"}]}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 21:55:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x1, &(0x7f0000000dc0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:09 executing program 4: socketpair(0xa, 0x0, 0x0, &(0x7f0000000280)) 21:55:09 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 21:55:09 executing program 5: syslog(0x3, 0x0, 0x0) 21:55:09 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) [ 2820.143171][T11085] loop3: detected capacity change from 0 to 184 [ 2820.191843][T11085] isofs_fill_super: get root inode failed 21:55:09 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x29e5, 0x5}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x4}, 0x10) 21:55:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x3a7af0c9bd43c863, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x38}}, 0x0) [ 2820.673711][T24932] usb 3-1: new high-speed USB device number 93 using dummy_hcd 21:55:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x29e5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000100)=@tcp}, 0x20) 21:55:09 executing program 0: socketpair(0x23, 0x0, 0xfffffffc, &(0x7f0000000500)) [ 2820.770447][T11099] loop3: detected capacity change from 0 to 184 21:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)={0x28, r1, 0x85c21acbee779917, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2820.845543][T11099] isofs_fill_super: get root inode failed [ 2820.912869][T24932] usb 3-1: Using ep0 maxpacket: 16 [ 2821.043130][T24932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2821.054319][T24932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2821.064394][T24932] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2821.073683][T24932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2821.103498][T24932] usb 3-1: config 0 descriptor?? [ 2821.346871][T11094] UDC core: couldn't find an available UDC or it's busy: -16 [ 2821.354940][T11094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2821.664322][T24932] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000F/input/input121 [ 2821.748160][T24932] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.000F/input/input122 [ 2821.818016][T24932] kye 0003:0458:5019.000F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 2821.860638][T24932] usb 3-1: USB disconnect, device number 93 21:55:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000220000000000002200000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200", 0x9e, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 21:55:11 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000002bc0)={0x0, "60bdabe761339c697484417f47e23e041e62109219f5e97edc82130ca14310c2646a1611a405ad5a809a9f755ce0d3c810dae2595b199e62324d5c83b2933b9eadd9b57107e58a690a7d885e4c3fff1c7c929acf5f9e3fcccab6c43d9a2838e57fa0479261b86e38b8151e7e216a569e6b87a9b491a8ebe994db5ef1128c13a3"}) 21:55:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x29e5, 0x1}, 0x48) 21:55:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2822.524238][T11115] loop3: detected capacity change from 0 to 184 21:55:11 executing program 5: pipe(&(0x7f0000001040)) 21:55:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) [ 2822.650660][T11115] isofs_fill_super: get root inode failed 21:55:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@btf_id], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:11 executing program 0: r0 = socket(0x2, 0x3, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e1, 0x0) 21:55:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:12 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 21:55:12 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) 21:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x319, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "e622858a"}]}, 0x24}}, 0x0) 21:55:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x0) 21:55:12 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000050c0)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000006640)=[{{&(0x7f0000002800)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, 0x0}}, {{&(0x7f0000005ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0}}], 0x2, 0x0) 21:55:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00'}) [ 2823.258103][T11130] loop3: detected capacity change from 0 to 184 [ 2823.390622][T11130] ISOFS: Unable to identify CD-ROM format. 21:55:12 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:55:12 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x801, &(0x7f0000000640)=[{&(0x7f0000000480)="b6485e8b5797b29ddb5a06aa1122f3bee4a845e9834820b6c7414f6f19774fbbcaac81df37ad63525a16dfbdd462bc0b6e6a6544dec935717fcafdfb5489e2fe51a0d94be842aea836e3277f8b95c608265b8ae03e366c60aca98937f505f8bc6eafc16d", 0x64}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14}}], 0x28}, 0x0) 21:55:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) sendfile(r8, r1, 0x0, 0x100000004) 21:55:12 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000001480)=[{}, {}], 0x4000) [ 2823.832871][T11143] loop3: detected capacity change from 0 to 184 [ 2823.872675][T11143] ISOFS: Unable to identify CD-ROM format. 21:55:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acorn']) 21:55:13 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000500)) 21:55:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x29e5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000100)=@tcp, 0x1}, 0x20) [ 2824.144855][ T24] audit: type=1804 audit(1650664513.176:78): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1480727581/syzkaller.1RknXS/829/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 21:55:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x40}}, 0x0) 21:55:13 executing program 2: bpf$MAP_CREATE(0xd, &(0x7f0000000080), 0x48) 21:55:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}], 0x20}}], 0x113, 0x0) [ 2824.436843][T11158] loop3: detected capacity change from 0 to 184 [ 2824.501840][T11158] ISOFS: Unable to identify CD-ROM format. 21:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 21:55:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}], 0x20}}], 0x300, 0x1ee) 21:55:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000006140)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfec00000}, 0x80, 0x0}}], 0x1, 0x0) 21:55:13 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, 0x0) 21:55:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 21:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 21:55:14 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) [ 2824.973592][T11175] loop3: detected capacity change from 0 to 184 21:55:14 executing program 4: r0 = socket(0x23, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 21:55:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, 0x0) 21:55:14 executing program 1: bpf$MAP_CREATE(0x10, &(0x7f0000000080), 0x48) 21:55:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:55:14 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="b6", 0x1}], 0x1}, 0x0) 21:55:14 executing program 4: socketpair(0x2, 0x2, 0x73, &(0x7f00000004c0)) [ 2825.464404][T11186] loop3: detected capacity change from 0 to 184 21:55:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:14 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, 0x0) 21:55:14 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x0, @local={0xac, 0x2}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="b6", 0x1}], 0x1}, 0x0) 21:55:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002400)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38}}, 0x0) 21:55:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000640)='y', 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000140)=""/104, 0x68}], 0x2}, 0x0) 21:55:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 2825.933085][T11197] loop3: detected capacity change from 0 to 184 21:55:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 21:55:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x29e5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 21:55:15 executing program 5: socketpair(0x2, 0x2, 0x88, &(0x7f00000004c0)) 21:55:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000cc40)=[{{0x0, 0x0, &(0x7f00000097c0)=[{&(0x7f0000007640)=""/105, 0x69}], 0x1}}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 2826.601323][T11213] loop3: detected capacity change from 0 to 184 21:55:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x40}}], 0x2, 0x0) 21:55:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 21:55:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd}, {}, {0x10}, {}, {}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5, 0x655}]}]}}, &(0x7f0000000140)=""/227, 0x66, 0xe3, 0x1}, 0x20) 21:55:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x200, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) 21:55:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 21:55:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x10, 0x49, 0x3a7af0c9bd43c863, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x38}}, 0x0) [ 2827.215918][T11226] loop3: detected capacity change from 0 to 184 21:55:16 executing program 5: socketpair(0xa, 0x2, 0x0, &(0x7f0000000000)) 21:55:16 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f00000004c0), 0x1}}, {{0x0, 0x0, 0x0, 0x38}}], 0x2, 0x0) 21:55:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[]) 21:55:16 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) 21:55:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_IE={0x12, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val, @void}}, @ext_channel_switch={0x3c, 0x4}]}]}, 0x2c}}, 0x0) 21:55:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'vlan1\x00', {0x4}}) sendmmsg$unix(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x4011) 21:55:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x0, 0x0, {0x6}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:updpwd_exec_t:s0\x00'}]}, 0x50}}, 0x0) [ 2827.865941][T11243] loop3: detected capacity change from 0 to 184 21:55:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x3a7af0c9bd43c863, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x38}}, 0x0) 21:55:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="170100000000000061117700000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f94501040000a860e8efbc6f2b2a3e3173d566a0f06c54c3a4903ef31c4d4aea54404458cef2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0796f23526ec0fd97f734c4c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962f1715321f077d555da11fa798de504e2865cd81f2b77fdd76bd77f812d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f131b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418494d9d10d76e603134e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000cc34c49914f1aa198a77b3610b7403930fd42051d4b74436173050027791c9c1e04ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9f44179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c359afe73947afebdf55b6ee255055766b7c443607792db9f86c6a9419a2724fa4fc9a71e6576730e090a5861120c1fa4c2b3bc04c1d4e5b4b3d01720c110c3bb522a60a50993915e2fea9b689dbc24f86051ae20b7b66393a08dea8e97a65db3d7a8b4cb046aa4b1"], &(0x7f0000000080)='GPL\x00', 0x3, 0x2f2, &(0x7f0000002580)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:55:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 21:55:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x73}}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x7}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x103) 21:55:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x1040000000000000, 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 2828.528289][T11258] loop3: detected capacity change from 0 to 184 21:55:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0x2f2, &(0x7f0000002580)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:55:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x1c}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:17 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 21:55:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0xb, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2829.167008][T11275] loop3: detected capacity change from 0 to 184 21:55:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x0, 0x80}, 0x48) 21:55:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x7, 0x0, 0x0, 0x0, 0xb3}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@generic={0x4e}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 21:55:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x1040000000000000, 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 2829.797234][T11285] loop3: detected capacity change from 0 to 184 21:55:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@generic={0x67}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:19 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,ma']) 21:55:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3e}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf4240, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x1040000000000000, 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 2830.361061][T11299] loop3: detected capacity change from 0 to 184 21:55:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0x2f2, &(0x7f0000002580)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:55:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x0, 0x0, 0x2}, 0x48) 21:55:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@generic={0x6f}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:20 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,ma']) 21:55:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1, &(0x7f0000000500)=@raw=[@alu={0x0, 0x0, 0x2}], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2831.124664][T11310] loop3: detected capacity change from 0 to 184 21:55:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@generic={0x7c}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x26}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:20 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,ma']) 21:55:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x1040000000000000, 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 21:55:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x15, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d6405000000000065040100010040000404000001007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09f07fb2ea80e5cf8dcf819b5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96b4673b4e8d5467e357754508535766c80114604eab9b290a248a120c9c6e39f403ff065fd3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c66c01e4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b48a93fe94c756108afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f33d208814509fe7390000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed95157abb19700f0941e35e1577c10e509c9b134515d3d2369f516a49eeeb1a662c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202994c40d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f1db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b9072c80719a4b8ee28fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800a041307bd8325a442095bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cabfcd55f8c81f5eb1f8d615ca27efb2193b1665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223117a07a3484124c5563cd37343d09da7244fdfa86257e17f783f66dea226db5a97d2a1a9bd94927067711dda05e855df6863af1327d2b093f5a75b9a84a47ac8c78410b29a2690c79b459fae1ecb1f43eafcb23ac11569b6a41d7533fb0cb384e67adc43ae0d69f29936f17021bfe0adafa961fd78940a195e6cd109d8c5cb433cfe3dbe1d2eedef51a92a31fa238b753a3340b2f92e24a7d52e2b4b49bdb031c5d0187cedd5d01f7f1ad9bfab6d14104068971eed64b6b84486b6cd74602dccbb8a621f5b22147f824be7e3bc9bf2d4a61129e8794000aa8907a6721d5543cd200"/1005], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x27, 0x303, &(0x7f0000000040)="b90103600000f007009e0ff088f71fffffe10e003300633a77fbac141441e0002001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0xc) 21:55:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x47}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2831.728086][T11320] loop3: detected capacity change from 0 to 184 21:55:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="170100000000000061111c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f94501040000a860e8efbc6f2b2a3e3173d566a0f06c54c3a4903ef31c4d4aea54404458cef2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0796f23526ec0fd97f734c4c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962f1715321f077d555da11fa798de504e2865cd81f2b77fdd76bd77f812d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f131b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418494d9d10d76e603134e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000cc34c49914f1aa198a77b3610b7403930fd42051d4b74436173050027791c9c1e04ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9f44179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c359afe73947afebdf55b6ee255055766b7c443607792db9f86c6a9419a2724fa4fc9a71e6576730e090a5861120c1fa4c2b3bc04c1d4e5b4b3d01720c110c3bb522a60a50993915e2fea9b689dbc24f86051ae20b7b66393a08dea8e97a65db3d7a8b4cb046aa4b1"], &(0x7f0000000080)='GPL\x00', 0x3, 0x2f2, &(0x7f0000002580)=""/195, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:55:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=ac']) 21:55:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x18, 0x12}}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0xc, 0x0, 0x0, 0x0}, 0x20) 21:55:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x54}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2832.453686][T11333] loop3: detected capacity change from 0 to 184 21:55:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=ac']) 21:55:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103600, 0x0) close(r0) 21:55:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@generic={0x2c}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000580)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2833.009816][T11346] loop3: detected capacity change from 0 to 184 21:55:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x2}]}}, &(0x7f0000000080)=""/229, 0x26, 0xe5, 0x1}, 0x20) 21:55:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 21:55:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:22 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=ac']) 21:55:22 executing program 0: socketpair(0xa, 0x5, 0x2, &(0x7f0000000000)) 21:55:22 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x2e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r1, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000010c0)=[0x0, 0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 21:55:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="852000000000000061110c00000000008510000002000000852020000500000095000000000000009500a505000000007751e8ba639a6788a341cca555077e3b159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c6a0f06c54c3a4903ef31c4d4aea54404458ce30f2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a50f713d4e21b3336f1ae0796f23526ec0fd97f734c44815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962f1715321f077d555da11fa798de504e287ecd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b751d9ab6594c20659593d60abf09dfde18166d285f8186415c9b3e67d127e56f3d3759dcfeb8206"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:55:22 executing program 4: socketpair$nbd(0x2, 0x2, 0x0, &(0x7f0000000100)) [ 2833.828670][T11358] loop3: detected capacity change from 0 to 184 21:55:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x8927, &(0x7f0000000040)={0x0, 0x0}) 21:55:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000480)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) 21:55:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acor']) 21:55:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x64, &(0x7f0000000040)=[{}]}) 21:55:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fchownat(r0, 0x0, 0x0, 0x0, 0x0) [ 2834.444676][T11374] loop3: detected capacity change from 0 to 184 21:55:23 executing program 0: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:55:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:23 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acor']) 21:55:23 executing program 4: utime(&(0x7f0000020680)='./file0\x00', 0x0) 21:55:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r0) 21:55:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x20, 0x1ff, 0x0, 0x1}, 0x48) 21:55:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x1800, 0x1ff, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) [ 2835.061404][T11386] loop3: detected capacity change from 0 to 184 21:55:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x0, 0x0, 0x0, 0x204, 0x1}, 0x48) 21:55:24 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='cruft,map=acor']) 21:55:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 21:55:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x8927, &(0x7f0000000040)={0x0, 0x0}) 21:55:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) close(r0) [ 2835.673020][T11400] loop3: detected capacity change from 0 to 184 21:55:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454dd, &(0x7f0000000080)={0x0, 0x0}) 21:55:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x4, 0x1800, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)={0x9}, 0x8) 21:55:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000380)=""/241, 0x31, 0xf1, 0x1}, 0x20) 21:55:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x20, 0x1ff, 0xa, 0x1}, 0x48) 21:55:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x800454d2, 0x0) 21:55:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1d}, {}]}) 21:55:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x20, 0x1ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 21:55:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x1700, 0x1ff, 0xc, 0x1}, 0x48) 21:55:26 executing program 5: socketpair(0xc, 0x0, 0x0, &(0x7f0000002a00)) 21:55:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) close(r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$sock(r2, 0x0, 0x40010) 21:55:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) 21:55:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="fafffffdc7653108ed9fa939a0e071a169c0c1493369afa9f493fe4cb8a4fac4512e32d820766f9ebd1c79731e236f88fc056e8fb5f6a46ec6ab89"]) 21:55:26 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(0xffffffffffffffff, 0x3000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) 21:55:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wg1\x00', 0x4232}) 21:55:27 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(0xffffffffffffffff, 0x3000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454d2, &(0x7f0000000080)={0x0, 0x0}) 21:55:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) close(r0) 21:55:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:27 executing program 5: prctl$PR_SET_SECCOMP(0x22, 0x0, &(0x7f0000000200)={0x0, 0x0}) 21:55:27 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:55:27 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(0xffffffffffffffff, 0x3000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f0000003740)) [ 2838.881052][ T24] audit: type=1326 audit(1650664527.906:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2838.904643][ T24] audit: type=1326 audit(1650664527.906:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 21:55:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, 0x45, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth0_to_hsr\x00'}) 21:55:28 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006340), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000000a800), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f000000a840)=r1) [ 2839.015537][ T24] audit: type=1326 audit(1650664527.996:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2839.039433][ T24] audit: type=1326 audit(1650664527.996:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2839.062328][ T24] audit: type=1326 audit(1650664527.996:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2839.085171][ T24] audit: type=1326 audit(1650664527.996:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2839.108399][ T24] audit: type=1326 audit(1650664527.996:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2839.131271][ T24] audit: type=1326 audit(1650664527.996:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 21:55:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 21:55:28 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) pselect6(0x40, &(0x7f0000001d00), &(0x7f0000001d40)={0x1f}, 0x0, 0x0, 0x0) 21:55:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x2) 21:55:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r1, 0x9, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4, 0x8}]}, 0x18}}, 0x0) 21:55:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, 0x0, 0x0) [ 2839.923401][ T24] audit: type=1326 audit(1650664528.696:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11490 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f09549 code=0x7ffc0000 [ 2839.946555][ T24] audit: type=1326 audit(1650664528.706:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11490 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f09549 code=0x7ffc0000 21:55:29 executing program 5: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000000)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) [ 2840.017369][T11499] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 21:55:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 21:55:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:29 executing program 1: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, 0x0, 0x0) 21:55:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 21:55:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x9}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:55:29 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)={[{@map_off}]}) 21:55:29 executing program 1: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, 0x0, 0x0) 21:55:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 21:55:30 executing program 3: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:30 executing program 1: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:30 executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x84, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @broadcast}, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000, 0x12}) [ 2841.344914][T11522] ISOFS: Unable to identify CD-ROM format. 21:55:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:30 executing program 3: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:30 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) 21:55:30 executing program 1: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, 0xffffffffffffffff, 0x5c) 21:55:31 executing program 3: r0 = add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 21:55:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x33fe0}}, 0x0) 21:55:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) 21:55:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:31 executing program 3: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f0000000480)="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", 0xb81}], 0x0, 0x0) 21:55:31 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006340), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 21:55:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) [ 2842.821467][T11565] loop3: detected capacity change from 0 to 5 21:55:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETLINK(r0, 0x800454ff, 0x0) 21:55:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, &(0x7f0000003740)) 21:55:32 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002440), 0x0, &(0x7f0000003000)=ANY=[@ANYBLOB='utf8,hide,map=o']) 21:55:32 executing program 3: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x7, 0x0) [ 2843.160689][T11050] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:55:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:32 executing program 1: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000000), 0x0) [ 2843.347607][T11579] tap0: tun_chr_ioctl cmd 2147767551 21:55:32 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0f, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000600600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="8081", 0x2, 0x1600}], 0x81, &(0x7f0000000180)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x0, 0x0, 0x2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x10}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) 21:55:32 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002440), 0x0, &(0x7f0000003000)=ANY=[@ANYBLOB='utf8,hide,map=off,']) 21:55:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:32 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000880)=""/202, 0xca}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f00000006c0)=""/104, 0x68}, {&(0x7f0000000a80)=""/214, 0xd6}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/33, 0x21}], 0x9}}], 0x1, 0x0, 0x0) 21:55:32 executing program 1: syz_mount_image$msdos(&(0x7f0000001580), 0x0, 0x0, 0x3, &(0x7f0000001a40)=[{&(0x7f0000001600)='/', 0x1}, {&(0x7f0000001880)="81", 0x1, 0x7fffffffffffffff}, {&(0x7f0000001940)='G', 0x1, 0x1501c461}], 0x0, &(0x7f0000001b00)) 21:55:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) [ 2844.246437][T11591] ISOFS: Unable to identify CD-ROM format. [ 2844.274352][T11598] loop1: detected capacity change from 0 to 264192 21:55:33 executing program 0: pselect6(0x31, &(0x7f00000007c0), 0x0, &(0x7f0000000840), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @generic={0x22, "a7dfb702d350aadcf2a785d5110f"}, @generic={0x28, "9e02a8fbeea421b88dfd50f9a915"}, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xe000, &(0x7f0000000000)='rose0\x00', 0x7, 0x2, 0x20}) 21:55:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x15, 0x0, &(0x7f0000003740)) 21:55:33 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 21:55:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x24, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, 0x5f, 0x0, 0x0, 0x0, 0x5e02, 0x0, 0xfffffffffffffffd, 0x0, 0x12}) 21:55:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x24, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f0000000980)=""/146, 0x92}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x139}, {&(0x7f0000000140)=""/85, 0x9fc}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0x29}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x18}, {&(0x7f0000000000)=""/22, 0x348}], 0x67, &(0x7f0000000600)=""/191, 0x41, 0x40000000}}], 0x400000000000153, 0x0, &(0x7f0000003700)={0x77359400}) 21:55:34 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24}, 0x24}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x139}, {&(0x7f0000000140)=""/85, 0x9fc}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0x29}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x18}, {&(0x7f0000000000)=""/22, 0x348}], 0x67, &(0x7f0000000600)=""/191, 0x41, 0x40000000}}], 0x400000000000153, 0x0, &(0x7f0000003700)={0x77359400}) 21:55:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, 0x45, 0x0, 0x0, 0x300000000000000, 0xfd}) 21:55:34 executing program 3: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 21:55:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:35 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f0000000980)=""/146, 0x92}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x139}, {&(0x7f0000000140)=""/85, 0x9fc}, {&(0x7f0000000fc0)=""/4096, 0x29b}, {&(0x7f0000000400)=""/106, 0x29}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x18}, {&(0x7f0000000000)=""/22, 0x348}], 0x67, &(0x7f0000000600)=""/191, 0x41, 0x40000000}}], 0x400000000000153, 0x0, &(0x7f0000003700)={0x77359400}) 21:55:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x68000000) 21:55:35 executing program 0: r0 = socket$packet(0x2, 0xa, 0x300) bind$packet(r0, 0x0, 0x0) 21:55:35 executing program 3: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) [ 2846.482458][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 2846.482525][ T24] audit: type=1326 audit(1650664535.506:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11650 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94549 code=0x7ffc0000 21:55:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) [ 2846.511960][ T24] audit: type=1326 audit(1650664535.516:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11650 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94549 code=0x7ffc0000 [ 2846.538016][ T24] audit: type=1326 audit(1650664535.526:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11650 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94549 code=0x7ffc0000 21:55:35 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x00L\x00\x00\x10b?\rp9\x1b\xee\xf5\xfe\x98!uw\xc0\x91\x8f\xa4\xf6\xfak2l\x7f\x15\xbc\xc9\xff\x14D\xf9\xb5\x89p\xce\x1bW\x81&\xbf\x96g|\xba\xafR@\x887\x9d\xc2\xf1\xdc\xd8', 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc, 0x11, r1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000080), 0x0, 0x0) 21:55:35 executing program 5: syz_open_procfs(0x0, &(0x7f0000002c40)='net/fib_trie\x00') 21:55:35 executing program 0: fsopen(&(0x7f0000001200)='proc\x00', 0x0) 21:55:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 21:55:35 executing program 3: getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:36 executing program 1: syz_io_uring_setup(0x751f, &(0x7f0000000100), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 21:55:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:36 executing program 0: bpf$MAP_CREATE(0x12, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 21:55:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 21:55:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 21:55:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x29, 0x0, &(0x7f0000003740)) 21:55:36 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='~', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback}, 0x1c) 21:55:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 21:55:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) 21:55:37 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:37 executing program 1: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40), 0x0, 0x0) 21:55:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(0xffffffffffffffff, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:37 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:37 executing program 5: futex(0x0, 0x109, 0x0, &(0x7f0000000200), 0x0, 0x0) 21:55:38 executing program 4: syz_io_uring_setup(0x6a6b, &(0x7f00000000c0), &(0x7f0000e13000/0x3000)=nil, &(0x7f000042a000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5cea, &(0x7f0000000180), &(0x7f0000b86000/0x2000)=nil, &(0x7f0000e76000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) 21:55:38 executing program 5: syz_io_uring_setup(0x5ff4, &(0x7f0000000240), &(0x7f00008ad000/0x3000)=nil, &(0x7f00006a0000/0x4000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x138f, &(0x7f00000002c0), &(0x7f00007c4000/0x2000)=nil, &(0x7f0000843000/0x2000)=nil, &(0x7f00000001c0), 0x0) 21:55:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c0f, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000600600100000f000004020000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000000180)) 21:55:38 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(0xffffffffffffffff, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) [ 2849.443256][T11729] loop1: detected capacity change from 0 to 1054 [ 2849.485684][T11729] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2849.497804][T11729] EXT4-fs (loop1): group descriptors corrupted! 21:55:38 executing program 4: bpf$BPF_BTF_LOAD(0x4, 0x0, 0x0) 21:55:38 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x800) [ 2849.703716][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 2849.710679][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 21:55:38 executing program 1: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x3, 0x0, 0x0) 21:55:38 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)=ANY=[]}) 21:55:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(0xffffffffffffffff, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) [ 2850.069739][ T24] audit: type=1326 audit(1650664539.096:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11740 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47549 code=0x7ffc0000 21:55:39 executing program 5: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) 21:55:39 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) [ 2850.209455][ T24] audit: type=1326 audit(1650664539.126:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11740 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f47549 code=0x7ffc0000 [ 2850.233396][ T24] audit: type=1326 audit(1650664539.126:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11740 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47549 code=0x7ffc0000 21:55:39 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @multicast1}, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x12}) 21:55:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x800454ff, 0x0) 21:55:39 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:39 executing program 5: syz_mount_image$romfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000002240)='ext3\x00', &(0x7f0000002280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)) 21:55:39 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x0) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:40 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x90) 21:55:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETLINK(r0, 0x800454d2, 0x20000000) 21:55:40 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:40 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{}, {}]}) 21:55:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000100)) [ 2851.483902][T11775] tap0: tun_chr_ioctl cmd 2147767506 21:55:40 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x0) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:40 executing program 5: syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@block={'block', 0x3d, 0x200}}]}) 21:55:40 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000d5e000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x5ff4, &(0x7f0000000240), &(0x7f00008ad000/0x3000)=nil, &(0x7f00006a0000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000400)) 21:55:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000100)) 21:55:41 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x22, 0x0, &(0x7f0000003740)) 21:55:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) [ 2852.240519][T11790] ISOFS: Unable to identify CD-ROM format. 21:55:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000100)) 21:55:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x0) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:41 executing program 0: r0 = syz_io_uring_setup(0x5677, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0xffffff6b) pipe2(&(0x7f0000000040), 0x0) 21:55:41 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{}, {0x35}]}) 21:55:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) 21:55:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:41 executing program 0: r0 = syz_io_uring_setup(0x5677, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:42 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000004100)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) 21:55:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) 21:55:42 executing program 0: r0 = syz_io_uring_setup(0x5677, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) 21:55:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) [ 2853.919797][T11811] not chained 690000 origins [ 2853.924911][T11811] CPU: 1 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2853.933747][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.943827][T11811] Call Trace: [ 2853.947122][T11811] [ 2853.950061][T11811] dump_stack_lvl+0x1ff/0x28e [ 2853.954785][T11811] dump_stack+0x25/0x28 [ 2853.958975][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2853.964754][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2853.970873][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2853.976016][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2853.981865][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2853.987462][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2853.992604][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2853.998451][T11811] ? should_fail+0x75/0x9c0 [ 2854.002993][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2854.008154][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2854.014455][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2854.020592][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2854.025738][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2854.031583][T11811] __msan_chain_origin+0xbf/0x140 [ 2854.036656][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.041827][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.046808][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2854.051705][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.056278][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2854.061438][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2854.066628][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2854.072937][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2854.079060][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.085611][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.090342][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.096724][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.101792][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.106681][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.111218][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.117588][T11811] RIP: 0023:0xf7f47549 [ 2854.121674][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2854.141319][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2854.149760][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2854.157752][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2854.165747][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2854.173744][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2854.181733][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2854.189741][T11811] [ 2854.196352][T11811] Uninit was stored to memory at: [ 2854.203525][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.208692][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.214616][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.219176][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.224277][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.230668][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.235850][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.240756][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.245445][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.251825][T11811] [ 2854.254253][T11811] Uninit was stored to memory at: [ 2854.259366][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.264643][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.269634][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.274317][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.279091][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.285675][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.290743][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.295823][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.300385][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.306962][T11811] [ 2854.309296][T11811] Uninit was stored to memory at: [ 2854.314551][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.319726][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.324886][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.329439][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.334371][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.340752][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.346020][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.350924][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.355717][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.362193][T11811] [ 2854.364526][T11811] Uninit was stored to memory at: [ 2854.369622][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.374949][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.379931][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.384664][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.389389][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.395950][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.401021][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.406089][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.410639][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.417197][T11811] [ 2854.419528][T11811] Uninit was stored to memory at: [ 2854.424769][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.429923][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.435095][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.439658][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.444572][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.450995][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.456249][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.461148][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.465882][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.472350][T11811] [ 2854.474689][T11811] Uninit was stored to memory at: [ 2854.479801][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.485134][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.490113][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.494846][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.499579][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.506142][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.511209][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.516285][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.520836][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.527389][T11811] [ 2854.529720][T11811] Uninit was stored to memory at: [ 2854.534954][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2854.540107][T11811] get_compat_msghdr+0x108/0x2c0 [ 2854.545265][T11811] do_recvmmsg+0xd77/0x2120 [ 2854.549903][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2854.554808][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2854.561186][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2854.566419][T11811] do_fast_syscall_32+0x34/0x70 [ 2854.571314][T11811] do_SYSENTER_32+0x1b/0x20 [ 2854.576025][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2854.582503][T11811] [ 2854.584831][T11811] Local variable msg_sys created at: [ 2854.590116][T11811] do_recvmmsg+0xbb/0x2120 [ 2854.594750][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.373262][T11811] not chained 700000 origins [ 2855.377986][T11811] CPU: 0 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2855.386784][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.396862][T11811] Call Trace: [ 2855.400153][T11811] [ 2855.403096][T11811] dump_stack_lvl+0x1ff/0x28e [ 2855.407828][T11811] dump_stack+0x25/0x28 [ 2855.412020][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2855.417801][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2855.423930][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2855.429079][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2855.434934][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2855.440544][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2855.445695][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2855.451558][T11811] ? should_fail+0x75/0x9c0 [ 2855.456101][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2855.461246][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2855.467553][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2855.473685][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2855.478839][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2855.484685][T11811] __msan_chain_origin+0xbf/0x140 [ 2855.489769][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.494947][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.499942][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2855.504847][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.509432][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2855.514604][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2855.519753][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2855.526059][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2855.532188][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.538755][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.543495][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.549894][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.554968][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.559868][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.564424][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.570811][T11811] RIP: 0023:0xf7f47549 [ 2855.574904][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2855.594552][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2855.602999][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2855.610996][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2855.618994][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2855.626993][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2855.634987][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2855.642997][T11811] [ 2855.649931][T11811] Uninit was stored to memory at: [ 2855.655660][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.660814][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.665887][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.670439][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.675251][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.681631][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.686790][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.691682][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.696312][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.702772][T11811] [ 2855.705097][T11811] Uninit was stored to memory at: [ 2855.710187][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.715431][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.720414][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.725042][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.729758][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.736268][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.741339][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.746324][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.750873][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.757404][T11811] [ 2855.759740][T11811] Uninit was stored to memory at: [ 2855.764978][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.770130][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.775277][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.779828][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.784704][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.791085][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.796324][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.801225][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.805947][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.812428][T11811] [ 2855.814757][T11811] Uninit was stored to memory at: [ 2855.819845][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.825143][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.830125][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.834829][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.839554][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.846100][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.851172][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.856222][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.860771][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.867346][T11811] [ 2855.869679][T11811] Uninit was stored to memory at: [ 2855.874921][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.880078][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.885213][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.889766][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.894640][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.901030][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.906257][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.911154][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.915851][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.922338][T11811] [ 2855.924673][T11811] Uninit was stored to memory at: [ 2855.929764][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.935159][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.940139][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.944817][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2855.949542][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2855.956050][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2855.961125][T11811] do_fast_syscall_32+0x34/0x70 [ 2855.966107][T11811] do_SYSENTER_32+0x1b/0x20 [ 2855.970651][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2855.977119][T11811] [ 2855.979447][T11811] Uninit was stored to memory at: [ 2855.984671][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2855.989819][T11811] get_compat_msghdr+0x108/0x2c0 [ 2855.994931][T11811] do_recvmmsg+0xd77/0x2120 [ 2855.999478][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.004345][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.010720][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.016002][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.020913][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.025583][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.031957][T11811] [ 2856.034434][T11811] Local variable msg_sys created at: [ 2856.039721][T11811] do_recvmmsg+0xbb/0x2120 [ 2856.044286][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.218331][T11811] not chained 710000 origins [ 2856.223100][T11811] CPU: 0 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2856.231896][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.241978][T11811] Call Trace: [ 2856.245261][T11811] [ 2856.248191][T11811] dump_stack_lvl+0x1ff/0x28e [ 2856.252920][T11811] dump_stack+0x25/0x28 [ 2856.257120][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2856.262900][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2856.269023][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2856.274158][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2856.280001][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2856.285584][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2856.290725][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2856.296551][T11811] ? should_fail+0x75/0x9c0 [ 2856.301112][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2856.306232][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2856.312509][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2856.318632][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2856.323759][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2856.329597][T11811] __msan_chain_origin+0xbf/0x140 [ 2856.334655][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.339821][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.344782][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2856.349665][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.354327][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2856.359492][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2856.364625][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2856.370902][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2856.377003][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.383567][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.388289][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.394654][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.399732][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.404634][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.409162][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.415515][T11811] RIP: 0023:0xf7f47549 [ 2856.419608][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2856.439237][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2856.447687][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2856.455668][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2856.463666][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2856.471656][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2856.479629][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2856.487633][T11811] [ 2856.494377][T11811] Uninit was stored to memory at: [ 2856.499488][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.509027][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.514127][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.518678][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.523490][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.529872][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.535097][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.539993][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.544663][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.551036][T11811] [ 2856.553501][T11811] Uninit was stored to memory at: [ 2856.558616][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.563910][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.568886][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.573560][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.578284][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.584806][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.589873][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.594895][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.599439][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.605950][T11811] [ 2856.608276][T11811] Uninit was stored to memory at: [ 2856.613496][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.618646][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.623772][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.628316][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.633160][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.639553][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.644747][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.649642][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.654320][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.660702][T11811] [ 2856.663177][T11811] Uninit was stored to memory at: [ 2856.668267][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.673563][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.678543][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.683216][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.687942][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.694421][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.699488][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.704514][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.709061][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.715539][T11811] [ 2856.717864][T11811] Uninit was stored to memory at: [ 2856.723083][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.728237][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.733364][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.737912][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.742779][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.749160][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.754354][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.759253][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.763929][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.770314][T11811] [ 2856.772733][T11811] Uninit was stored to memory at: [ 2856.777812][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.783100][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.788088][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.792786][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.797512][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.804024][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.809102][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.814159][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.818713][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.825253][T11811] [ 2856.827584][T11811] Uninit was stored to memory at: [ 2856.832824][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2856.837974][T11811] get_compat_msghdr+0x108/0x2c0 [ 2856.843084][T11811] do_recvmmsg+0xd77/0x2120 [ 2856.847639][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2856.852498][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2856.858885][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2856.864067][T11811] do_fast_syscall_32+0x34/0x70 [ 2856.868965][T11811] do_SYSENTER_32+0x1b/0x20 [ 2856.873656][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2856.880032][T11811] [ 2856.882495][T11811] Local variable msg_sys created at: [ 2856.887788][T11811] do_recvmmsg+0xbb/0x2120 [ 2856.892378][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.056239][T11811] not chained 720000 origins [ 2857.060874][T11811] CPU: 1 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2857.069650][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2857.079722][T11811] Call Trace: [ 2857.083002][T11811] [ 2857.085930][T11811] dump_stack_lvl+0x1ff/0x28e [ 2857.090632][T11811] dump_stack+0x25/0x28 [ 2857.094800][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2857.100566][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2857.106669][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.111816][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2857.117644][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2857.123219][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.128356][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2857.134179][T11811] ? should_fail+0x75/0x9c0 [ 2857.138693][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.143821][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2857.150094][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2857.156197][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.161346][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2857.167192][T11811] __msan_chain_origin+0xbf/0x140 [ 2857.172267][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.177449][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.182441][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2857.187344][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.191895][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2857.197034][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.202160][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2857.208465][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2857.214585][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.221117][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.225823][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.232183][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.237231][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.242101][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.246659][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.253015][T11811] RIP: 0023:0xf7f47549 [ 2857.257100][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2857.276745][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2857.285176][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2857.293166][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2857.301139][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2857.309121][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2857.317111][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2857.325097][T11811] [ 2857.330707][T11811] Uninit was stored to memory at: [ 2857.336247][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.341408][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.346509][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.351055][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.355897][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.362429][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.367503][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.372542][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.377112][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.383669][T11811] [ 2857.385999][T11811] Uninit was stored to memory at: [ 2857.391065][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.396319][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.401299][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.406023][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.410742][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.417223][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.422377][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.427271][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.431810][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.438306][T11811] [ 2857.440636][T11811] Uninit was stored to memory at: [ 2857.445841][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.450989][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.456120][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.460663][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.465485][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.471857][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.477054][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.481948][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.486645][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.493088][T11811] [ 2857.495405][T11811] Uninit was stored to memory at: [ 2857.500477][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.505728][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.510713][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.515419][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.520150][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.526678][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.531749][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.536760][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.541307][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.547897][T11811] [ 2857.550241][T11811] Uninit was stored to memory at: [ 2857.555510][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.560669][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.565760][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.570306][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.575160][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.581549][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.586744][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.591637][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.596299][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.602768][T11811] [ 2857.605095][T11811] Uninit was stored to memory at: [ 2857.610180][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.615445][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.620429][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.625177][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.629903][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.636438][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.641510][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.646519][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.651091][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.657628][T11811] [ 2857.659958][T11811] Uninit was stored to memory at: [ 2857.665193][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2857.670343][T11811] get_compat_msghdr+0x108/0x2c0 [ 2857.675424][T11811] do_recvmmsg+0xd77/0x2120 [ 2857.679971][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.684811][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2857.691190][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2857.696432][T11811] do_fast_syscall_32+0x34/0x70 [ 2857.701323][T11811] do_SYSENTER_32+0x1b/0x20 [ 2857.705969][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2857.712444][T11811] [ 2857.714775][T11811] Local variable msg_sys created at: [ 2857.720059][T11811] do_recvmmsg+0xbb/0x2120 [ 2857.724620][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2857.900536][T11811] not chained 730000 origins [ 2857.905305][T11811] CPU: 1 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2857.914109][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2857.924176][T11811] Call Trace: [ 2857.927469][T11811] [ 2857.930412][T11811] dump_stack_lvl+0x1ff/0x28e [ 2857.935118][T11811] dump_stack+0x25/0x28 [ 2857.939310][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2857.945070][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2857.951199][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.956338][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2857.962170][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2857.967777][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.972936][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2857.978786][T11811] ? should_fail+0x75/0x9c0 [ 2857.983321][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2857.988474][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2857.994774][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2858.000906][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.006040][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2858.011890][T11811] __msan_chain_origin+0xbf/0x140 [ 2858.016951][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.022129][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.027117][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2858.032028][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.036614][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2858.041758][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.046886][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2858.053188][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2858.059322][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.065861][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.070612][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.076972][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.082027][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.086929][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.091476][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.097853][T11811] RIP: 0023:0xf7f47549 [ 2858.102291][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2858.121938][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2858.130368][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2858.138348][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2858.146324][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2858.154315][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2858.162310][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2858.170315][T11811] [ 2858.177460][T11811] Uninit was stored to memory at: [ 2858.183838][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.189037][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.194116][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.198673][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.203479][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.209855][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.215013][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.219908][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.224604][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.230982][T11811] [ 2858.233419][T11811] Uninit was stored to memory at: [ 2858.238497][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.243777][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.248757][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.253409][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.258162][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.264672][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.269738][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.274742][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.279286][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.285797][T11811] [ 2858.288125][T11811] Uninit was stored to memory at: [ 2858.293322][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.298478][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.303594][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.308145][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.313015][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.319392][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.324583][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.329481][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.334169][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.340552][T11811] [ 2858.343009][T11811] Uninit was stored to memory at: [ 2858.348097][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.353395][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.358404][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.363074][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.367796][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.374327][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.379395][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.384416][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.388959][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.395421][T11811] [ 2858.397747][T11811] Uninit was stored to memory at: [ 2858.402957][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.408108][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.413170][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.417714][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.422566][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.428944][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.434132][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.439021][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.443692][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.450066][T11811] [ 2858.452528][T11811] Uninit was stored to memory at: [ 2858.457607][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.462883][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.467871][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.472562][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.477286][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.483789][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.488856][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.493874][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.498419][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.504908][T11811] [ 2858.507238][T11811] Uninit was stored to memory at: [ 2858.512485][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.517641][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.522742][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.527290][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.532137][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.538530][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.543727][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.548627][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.553315][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.559689][T11811] [ 2858.562128][T11811] Local variable msg_sys created at: [ 2858.567417][T11811] do_recvmmsg+0xbb/0x2120 [ 2858.571871][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.802849][T11811] not chained 740000 origins [ 2858.807484][T11811] CPU: 0 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2858.816283][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.826355][T11811] Call Trace: [ 2858.829635][T11811] [ 2858.832565][T11811] dump_stack_lvl+0x1ff/0x28e [ 2858.837282][T11811] dump_stack+0x25/0x28 [ 2858.841465][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2858.847234][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2858.853338][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.858487][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2858.864346][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2858.869947][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.875091][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2858.880916][T11811] ? should_fail+0x75/0x9c0 [ 2858.885434][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.890560][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2858.896837][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2858.902942][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.908089][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2858.913938][T11811] __msan_chain_origin+0xbf/0x140 [ 2858.919022][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2858.924178][T11811] get_compat_msghdr+0x108/0x2c0 [ 2858.929150][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2858.934035][T11811] do_recvmmsg+0xd77/0x2120 [ 2858.938590][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2858.943729][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2858.948851][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2858.955127][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2858.961250][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.967787][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2858.972501][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2858.978869][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2858.983918][T11811] do_fast_syscall_32+0x34/0x70 [ 2858.988788][T11811] do_SYSENTER_32+0x1b/0x20 [ 2858.993312][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2858.999667][T11811] RIP: 0023:0xf7f47549 [ 2859.003741][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2859.023387][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2859.031815][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2859.039792][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2859.047767][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2859.055747][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2859.063745][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2859.071734][T11811] [ 2859.078789][T11811] Uninit was stored to memory at: [ 2859.084466][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.089634][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.094750][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.099326][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.104185][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.110569][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.115785][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.120682][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.125381][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.131770][T11811] [ 2859.134255][T11811] Uninit was stored to memory at: [ 2859.139361][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.144629][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.149608][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.154319][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.159039][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.165565][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.170634][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.175639][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.180182][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.186730][T11811] [ 2859.189057][T11811] Uninit was stored to memory at: [ 2859.194301][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.199452][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.204601][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.209150][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.214027][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.220403][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.225581][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.230474][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.235154][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.241540][T11811] [ 2859.244029][T11811] Uninit was stored to memory at: [ 2859.249124][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.254465][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.259449][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.264092][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.268812][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.275346][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.280414][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.285407][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.289951][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.296431][T11811] [ 2859.298762][T11811] Uninit was stored to memory at: [ 2859.303988][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.309139][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.314289][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.318835][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.323708][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.330090][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.335356][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.340257][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.344902][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.351277][T11811] [ 2859.353769][T11811] Uninit was stored to memory at: [ 2859.358847][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.364148][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.369128][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.373846][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.378586][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.385076][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.390145][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.395191][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.399734][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.406227][T11811] [ 2859.408566][T11811] Uninit was stored to memory at: [ 2859.413796][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.418944][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.424124][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.428698][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.433627][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.440011][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.445180][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.450071][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.454775][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.461149][T11811] [ 2859.463648][T11811] Local variable msg_sys created at: [ 2859.468933][T11811] do_recvmmsg+0xbb/0x2120 [ 2859.473600][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.651550][T11811] not chained 750000 origins [ 2859.656264][T11811] CPU: 0 PID: 11811 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller #0 [ 2859.665047][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.675138][T11811] Call Trace: [ 2859.678414][T11811] [ 2859.681341][T11811] dump_stack_lvl+0x1ff/0x28e [ 2859.686045][T11811] dump_stack+0x25/0x28 [ 2859.690214][T11811] kmsan_internal_chain_origin+0x78/0x120 [ 2859.695976][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2859.702097][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2859.707231][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2859.713062][T11811] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 2859.718671][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2859.723827][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2859.729679][T11811] ? should_fail+0x75/0x9c0 [ 2859.734218][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2859.739360][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2859.745656][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2859.751762][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2859.756891][T11811] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 2859.762723][T11811] __msan_chain_origin+0xbf/0x140 [ 2859.767811][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.772980][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.777945][T11811] ? __sys_recvmmsg+0x51c/0x6f0 [ 2859.782819][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.787368][T11811] ? __stack_depot_save+0x21/0x4b0 [ 2859.792507][T11811] ? kmsan_get_metadata+0x33/0x220 [ 2859.797635][T11811] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 2859.803915][T11811] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 2859.810017][T11811] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.816550][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.821294][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.827657][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.832708][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.837599][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.842130][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.848504][T11811] RIP: 0023:0xf7f47549 [ 2859.852573][T11811] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 2859.872208][T11811] RSP: 002b:00000000f7f215cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2859.880659][T11811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2859.888641][T11811] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2859.896624][T11811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2859.904597][T11811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2859.912580][T11811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2859.920592][T11811] [ 2859.927157][T11811] Uninit was stored to memory at: [ 2859.933389][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.938573][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.943779][T11811] do_recvmmsg+0xd77/0x2120 [ 2859.948328][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2859.953172][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2859.959552][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2859.964754][T11811] do_fast_syscall_32+0x34/0x70 [ 2859.969651][T11811] do_SYSENTER_32+0x1b/0x20 [ 2859.974337][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2859.980721][T11811] [ 2859.983218][T11811] Uninit was stored to memory at: [ 2859.988311][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2859.993585][T11811] get_compat_msghdr+0x108/0x2c0 [ 2859.998568][T11811] do_recvmmsg+0xd77/0x2120 [ 2860.003271][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2860.007990][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2860.014568][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2860.019656][T11811] do_fast_syscall_32+0x34/0x70 [ 2860.024686][T11811] do_SYSENTER_32+0x1b/0x20 [ 2860.029231][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2860.035792][T11811] [ 2860.038143][T11811] Uninit was stored to memory at: [ 2860.043327][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2860.048482][T11811] get_compat_msghdr+0x108/0x2c0 [ 2860.053622][T11811] do_recvmmsg+0xd77/0x2120 [ 2860.058168][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2860.063041][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2860.069416][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2860.074642][T11811] do_fast_syscall_32+0x34/0x70 [ 2860.079556][T11811] do_SYSENTER_32+0x1b/0x20 [ 2860.084285][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2860.090675][T11811] [ 2860.093172][T11811] Uninit was stored to memory at: [ 2860.098256][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2860.103579][T11811] get_compat_msghdr+0x108/0x2c0 [ 2860.108571][T11811] do_recvmmsg+0xd77/0x2120 [ 2860.113289][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2860.118014][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2860.124546][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2860.129617][T11811] do_fast_syscall_32+0x34/0x70 [ 2860.134672][T11811] do_SYSENTER_32+0x1b/0x20 [ 2860.139215][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2860.145884][T11811] [ 2860.148214][T11811] Uninit was stored to memory at: [ 2860.153448][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2860.158600][T11811] get_compat_msghdr+0x108/0x2c0 [ 2860.163739][T11811] do_recvmmsg+0xd77/0x2120 [ 2860.168295][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2860.173119][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2860.179494][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2860.184720][T11811] do_fast_syscall_32+0x34/0x70 [ 2860.189613][T11811] do_SYSENTER_32+0x1b/0x20 [ 2860.194337][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2860.200713][T11811] [ 2860.203204][T11811] Uninit was stored to memory at: [ 2860.208285][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2860.213595][T11811] get_compat_msghdr+0x108/0x2c0 [ 2860.218573][T11811] do_recvmmsg+0xd77/0x2120 [ 2860.223267][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2860.227989][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2860.234435][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2860.239481][T11811] do_fast_syscall_32+0x34/0x70 [ 2860.244517][T11811] do_SYSENTER_32+0x1b/0x20 [ 2860.249066][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2860.255565][T11811] [ 2860.257894][T11811] Uninit was stored to memory at: [ 2860.263102][T11811] __get_compat_msghdr+0x6e1/0x9d0 [ 2860.268251][T11811] get_compat_msghdr+0x108/0x2c0 [ 2860.273347][T11811] do_recvmmsg+0xd77/0x2120 [ 2860.277979][T11811] __sys_recvmmsg+0x51c/0x6f0 [ 2860.282800][T11811] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 2860.289179][T11811] __do_fast_syscall_32+0x96/0xf0 [ 2860.294509][T11811] do_fast_syscall_32+0x34/0x70 [ 2860.299422][T11811] do_SYSENTER_32+0x1b/0x20 [ 2860.304106][T11811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2860.310489][T11811] [ 2860.312989][T11811] Local variable msg_sys created at: [ 2860.318278][T11811] do_recvmmsg+0xbb/0x2120 [ 2860.322917][T11811] __sys_recvmmsg+0x51c/0x6f0 21:55:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) 21:55:49 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0xd, 0x0, &(0x7f0000003740)) 21:55:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 21:55:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8930, &(0x7f0000000000)) 21:55:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:49 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 21:55:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000012c0)={0x60, r1, 0x401, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 21:55:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'bridge_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 21:55:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:50 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x1, 0xa4, &(0x7f00000001c0)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x10b) 21:55:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x425, 0x1, 0xce66, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 21:55:50 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:50 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x0, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'bridge_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@hbh={{0x48}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @private}]}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30}}, @common=@icmp6={{0x28}, {0x0, "e041"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 21:55:50 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0xbd, &(0x7f0000000600)=""/189, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4a24, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e26, @broadcast}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0)=0x9, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x130, 0x0, 0x2f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x800, 0x7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@cb_func={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe19}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x4c, &(0x7f0000000280)=""/76, 0x40f00, 0xa, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x200}, 0x10, 0x0, r0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {}, 0xe08a}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYBLOB="f71ae4e22eb342a1eccfe194da15f6ec288be78d62f9f9412ed46ece41c205ab5054a84326e92bc7f9cd37e92cca2e8665a5c596445aa069be5965c648b55d64cbb34ee444c7b1fcfdd334d2a5de69ebfca89b8a7776b05bd3230500"/104, @ANYRES16=r1], 0x1000001bd) socket$nl_route(0x10, 0x3, 0x0) 21:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 21:55:51 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:51 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0x3e0, 0x2f0, 0x3e0, 0x0, 0x3e0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @mcast2, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 21:55:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000021}) 21:55:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:51 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:51 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x6, @broadcast}, 0x2, {0x2, 0x0, @empty}, 'vlan0\x00'}) 21:55:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts={{0x18}}], 0x18}, 0x0) 21:55:52 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x48) 21:55:52 executing program 3: syz_emit_ethernet(0xb6, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x25, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @mptcp=@remove_addr={0x1e, 0x61, 0x0, 0x0, "a8df5c34c310d61bf0cc603efce4183a6cd397f6b8b6d92a5b4df5d5f3558f52af2d7b64e50f43b261e660161b4b4b558c7679e577c49dc71e5fcf910eed7af2e67933f1e92a32b8cfc5a193d653840d7c64c7bcf83d251c750ad973c478"}, @md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) 21:55:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:52 executing program 0: syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8946, &(0x7f0000000000)) 21:55:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) getsockname$unix(r0, 0x0, 0x0) 21:55:52 executing program 0: syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) write$binfmt_elf64(r0, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00']}, 0x178) sendmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="a5", 0xffd8}], 0x1}}], 0x1, 0x4000000) 21:55:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x1, &(0x7f0000001480)=@raw=[@generic], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'bridge_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 21:55:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:53 executing program 0: syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}, {0x0, 0xfffffffffffffe34}], 0x2) 21:55:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x0) 21:55:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:53 executing program 5: r0 = epoll_create(0xc5c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xb0000010}) 21:55:53 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, 0x0, 0x0) 21:55:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000140)) 21:55:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x2, [@datasec={0x0, 0x5, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}], "ab"}]}}, &(0x7f0000001b40)=""/218, 0x66, 0xda, 0x1}, 0x20) 21:55:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:54 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x40658a4fb2b25c90) 21:55:54 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, 0x0, 0x0) 21:55:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000700)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x8f4, 0x8, 0x0, 0x1, [{0x418, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x40c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}]}, {0x150, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8eabf3e5f0c357ea6b3b87aefeb7c080d3a94e86102ce95acff192071ed833d8"}]}, {0x2e0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "498a8b75158e4ceda4acdea9bb89226c05015c241cc94eb8fe041cbf8baba17c"}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x594, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x23c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_ALLOWEDIPS={0x1d0, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37e1bbc7b9bf1a72a97ded99793c7a235f2f28ce66194f02444d0a1716de71b4"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 21:55:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x8000600, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca21fffffff4010e00630277fbac141424ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 21:55:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0xd2, &(0x7f0000000140)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:54 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, 0x0, 0x0) 21:55:54 executing program 5: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000080)="322d83a2902d5afd5a55848d41d93d0a8a9c1b21972f6f876f4537db39dcd03285459e0120c0586db30665525c4c22deae02fa777aa01f81d8c2256bb238d4e411b2", 0x0, 0x0, 0x0}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0x0, &(0x7f00000001c0)=""/48}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 21:55:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 21:55:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fefffdff000000000100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c20"], 0x5c}}, 0x0) 21:55:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8901, &(0x7f0000000000)) 21:55:55 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) 21:55:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 21:55:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x2000, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x10b) 21:55:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f5, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000002a00)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote}}) 21:55:55 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_BALANCE(r0, 0x5411, 0x20000000) 21:55:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8936, 0x0) 21:55:55 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) 21:55:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/214, 0xd6) 21:55:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'bridge_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0x470}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 21:55:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) 21:55:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:56 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) 21:55:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3, 0x2, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 21:55:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xa, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:57 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{0x0}], 0x1) 21:55:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:57 executing program 5: socket$caif_seqpacket(0x25, 0xd, 0x0) 21:55:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'bridge_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 21:55:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:58 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{0x0}], 0x1) 21:55:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'vlan1\x00', @ifru_flags}) 21:55:58 executing program 5: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x35, &(0x7f0000000300)={0x1}, 0x8) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x36, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) sendto$inet6(r3, &(0x7f0000000680)="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", 0x1bc, 0x0, 0x0, 0xfffffffffffffe47) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) bind(r3, &(0x7f0000000000)=@nfc={0x27, 0x1, 0x1, 0x2}, 0x80) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x10b) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:55:58 executing program 4: socket$inet(0x2, 0x80e, 0x0) 21:55:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x7, 0xbd, &(0x7f0000000340)=""/189, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:58 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 21:55:58 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{0x0}], 0x1) 21:55:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "d334c5c2866eb57d0cab9613bfde55c660f2f9a52ee6b35496b00d7816cf646049d3a81ff756666070cfe23f52a2dc5bdef5a2a24dfd56fca20c15b709080c57dc743c9e908719f8b77640abf8aae9a0"}, 0xd8) 21:55:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, 0x0, 0x0) 21:55:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:59 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x4004800, 0x0, 0xffffff7c) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0xfac, {{0xa, 0x4e21, 0x81, @private0, 0xffffffff}}}, 0x88) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061114c000000000046000000000000009500020000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000240)=0x80) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000300)="2fc4193ec7cf71f22796f5d797829d0598f09ea48b58b4344d166d871067e3a11111f74220ad4c50281473b669c4194c9e720ceb3ae26b039723ce11fff353e46365c64ab1f88a199d844dff01c5d98f0311bd70bcddb6d08dc2c647c23e7d27e9eb8823aeeaabaa663662002e9fe9e3f428fe2f880151d4544de384df87", 0x7e}, {&(0x7f00000004c0)="2e2c83825042ce80a6433434f4b59a2b4a939fdd7a4f251afb7e6427d2e8028121b1b0c7f7b5a107148a285a70c8356e460c485fedae096869fba0ca53c2905d01a7b366dc944b0465c6c4c47856cf2ede5bb1b65f90d3adef017552cdd78916b99a44bd0b409a6dafe1740ec24c56b06dfcc1e2c1b72d1c569d91815ab7f2496006d19f446af6644c889fdf98924b9ae27551cb5ff36917412c42d1550c", 0x9e}, {&(0x7f0000000580)="a2e90e1f527837655b5a1f506abdd91fe04554cb9b463ed7b3c900a53738ad95c80e31d378e3ca01b454c119f50ea17c6392b4d76c7c444d27c95b5270c22491c4809c868a0d21a8b704cfa7eb82ec563f8bd23124017c80e0730fbcb44c0af1e1837f624a89a9d5d3aa51ba9f69d6efbfdf0829b4d3179e8802f6b28d2d8cfeb38dc619bca0b5d1f62154791ae7c17c8d18784b56d8bf2cb7af9629f64260fd06a1cf", 0xa3}, {&(0x7f0000000100)}, {&(0x7f0000000640)="b72a36817270acc93e4b309cb6d10280684be85842bd3924eab460120c48084b4afd832df4f4e1fd9f25113a85fe3a265d573b7895d4be43a1a1231bd247a487f201de6702f91912b894c5aea3febc5822720e7a5e0c5eef1ae0d2ac314b78f2f5ddf2ac4b34dc80ee5326b960403d0d7479f894650d7269ee5fb6a7f233148125ec17b210b364395adfab61a3e7e3b9e6762a9724d3babb2b6125ca93123a25be4bf85709b2c23650d851bbd8238e30c76bb249fc93e39960391f814d16ef364a38290852bf17dc1c65eb66e2ad78e7d29ea49e02ce9d3970d893425257659e89c7cf42903e496e6f6b7ce94a627b19b95fd1a003d349a03b0224f6bd", 0xfd}, {&(0x7f0000000380)="e64f800ceb6a5e2c8fa321fd86b57c5ddd3fa7441fa19d304c8f8efe1d5c1536b45d0183838c50d901640485", 0x2c}, {&(0x7f0000000740)="6c721de686ae16a592c596dbb2419a886280cd1f71e7dbe007a28f502d843c43455146c36fc404a1cd79942910b209c4801c9ac8dea93c6710a67970a55a214ded45c2b57bc305ce213efa93c1261021b11b36c64f44d30a334caf16e3c349d1a6027fa30afb71ba36d99e49a2c6ef6f82997e08753207480b878a558fe1d53f7cf71358b7fbac55ac446f2ac9f33e7fe94f18d570221c7429ed2cd566bf25c9b936ef6f61b6e887250df0ddce31e461cca8eb93b33f7f322fee47440f86a07f2efadb38926721", 0xc7}, {&(0x7f0000000840)="f6f5890af3197fe8614a", 0xa}, {&(0x7f0000000880)="13d5726c2725723def953ca203cc17dc4ce1acf1eeaba65b8827ae97de101a0f607d3875446116bce4172c67ea2e108240de9f1b21a43afefee8c1eb38ce472ba3be0b10edb3716e5237f9a9c362d1e4e182d7cbc1b8c55c39fa", 0x5a}], 0x9) 21:55:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={0x0}}, 0x0) 21:55:59 executing program 4: socketpair(0xa, 0x3, 0x8, &(0x7f0000000540)) 21:55:59 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) 21:55:59 executing program 3: r0 = gettid() pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000010c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 21:55:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) 21:55:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:55:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x4, &(0x7f0000000b40)=@framed={{}, [@alu]}, &(0x7f0000000b80)='GPL\x00', 0x2, 0x81, &(0x7f0000000bc0)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:55:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:55:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8971, &(0x7f0000000000)) 21:55:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)='7', 0x1}], 0x1}}], 0x1, 0x0) 21:56:01 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) 21:56:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:56:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001b40)=""/218, 0x1a, 0xda, 0x1}, 0x20) 21:56:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x6c9, 0x0, 0x7) 21:56:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 21:56:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xe0, 0xe0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @dev, [], [], 'bridge_slave_0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 21:56:02 executing program 5: timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) 21:56:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:56:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:02 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x0, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}}, 0x0) 21:56:02 executing program 0: r0 = syz_io_uring_setup(0x5677, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) 21:56:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}}, &(0x7f0000000180)=0xb0) 21:56:02 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)={0x18, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4}, @generic="e3"]}, 0x18}], 0x1}, 0x0) 21:56:02 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:56:02 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="7244b28b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000030000000000080044944eeba71a4976e252a22cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)={0x500, 0x0, 0x0, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x4e1, 0x0, 0x0, 0x1, [@generic="d7ee07a3792b00a2d2b9401135e2de9bda4f5ebc5a7a1a2b73cd5fca5837c4449e", @generic="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"]}]}, 0x500}], 0x1}, 0x0) 21:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=@RTM_DELMDB={0x18, 0x55, 0x1}, 0x18}}, 0x0) 21:56:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec1, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 21:56:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0xa, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x19, 0x0, 0x1, 0x1}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) 21:56:03 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:56:03 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x4) 21:56:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:03 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000200)=""/4096, 0x1000) 21:56:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffd}, 0x90) 21:56:03 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 21:56:03 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000200)=""/4096, 0x1000) 21:56:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x200, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0x20000004}) 21:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, 0x0, &(0x7f0000000100)) 21:56:04 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x8003, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141142, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000400)={0x0, r2, 0x0, 0x0, 0x2}) 21:56:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000200)=""/4096, 0x1000) 21:56:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 21:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, 0x0, &(0x7f0000000100)) 21:56:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000180)='THAWED\x00', 0x21) 21:56:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0xa, 0x0, @empty}}}, 0x90) 21:56:04 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000200)=""/4096, 0x1000) 21:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, 0x0, &(0x7f0000000100)) [ 2875.714591][T12162] bridge5: port 1(team0) entered blocking state [ 2875.721244][T12162] bridge5: port 1(team0) entered disabled state [ 2875.732117][T12162] device team_slave_0 entered promiscuous mode [ 2875.738464][T12162] device team_slave_1 entered promiscuous mode 21:56:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 21:56:05 executing program 0: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140), 0x8) 21:56:05 executing program 4: socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x81) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev, 0x0, r1}) 21:56:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x0) 21:56:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b46) 21:56:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 21:56:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x0) 21:56:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000100)="caa2ee2100e257b18b29ed70a1c338ea07c8b0e91d79f743682c17c361f69f1eff9967de358c76353bb179f33e3118cd34a46390df1c404d197dd3", 0x3b, 0x0, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @private=0xa010101, 0x4}, 0x80) sendmmsg(r1, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="7b472da22c23cb2ee40d3b3e43e4fdff", 0x20000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="c2b7fa54ffcd45c04af01da42526c008", 0x10}], 0x1}}], 0x2, 0x0) 21:56:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 21:56:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b3a) 21:56:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x0) 21:56:07 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') 21:56:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x0, 0x1ff, 0x8}) 21:56:08 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80002, 0x0) 21:56:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x540c) 21:56:08 executing program 5: openat$tcp_mem(0xffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 21:56:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) 21:56:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x0, 0x1ff, 0x8}) 21:56:08 executing program 1: unshare(0xc040400) r0 = inotify_init1(0x0) vmsplice(r0, 0x0, 0x0, 0x0) 21:56:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c5c, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000e600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="8081", 0x2, 0x1600}], 0x81, &(0x7f0000000140)=ANY=[]) 21:56:08 executing program 5: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) 21:56:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') pread64(r0, 0x0, 0x0, 0x0) 21:56:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x0, 0x1ff, 0x8}) 21:56:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 21:56:09 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x0) lseek(r0, 0x0, 0x0) 21:56:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x10, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000120000002200000060", 0xd, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x839, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x8000}, {&(0x7f0000011e00)="02", 0x1, 0x8400}, {&(0x7f0000011f00)="03", 0x1}, {&(0x7f0000012000)="04", 0x1}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x290}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003", 0x3d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af302000400000000000000000000000200000010000000020000000100000013", 0x49, 0x11180}, {&(0x7f0000013200)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000002", 0x1b, 0x11580}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r2, 0x0) 21:56:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) creat(&(0x7f0000000140)='./file0\x00', 0x0) 21:56:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x0, 0x1ff, 0x8}) [ 2880.275376][T12234] loop1: detected capacity change from 0 to 512 21:56:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x5433) 21:56:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/223) 21:56:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, 0x0) 21:56:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) [ 2880.616167][T12234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2880.616477][T12234] ext4 filesystem being mounted at /root/syzkaller-testdir1480727581/syzkaller.1RknXS/917/file0 supports timestamps until 2038 (0x7fffffff) 21:56:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x10}]}}, &(0x7f0000000080)=""/215, 0x26, 0xd7, 0x1}, 0x20) 21:56:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0xfe46, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, 0x0, 0x0) 21:56:10 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 21:56:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x8387, 0x0, 0x1ff}) 21:56:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup2(r0, r0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 21:56:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 21:56:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) close(r1) 21:56:10 executing program 3: unshare(0xc040400) inotify_init1(0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 21:56:11 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000000100), 0x4c880, 0x0) 21:56:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 21:56:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:11 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000120000002200000060", 0xd, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x839, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x8000}, {&(0x7f0000011e00)="02", 0x1, 0x8400}, {0x0, 0x0, 0x8800}, {&(0x7f0000012000)="04", 0x1, 0x8c00}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003", 0x3d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af302000400000000000000000000000200000010000000020000000100000013", 0x49, 0x11180}, {&(0x7f0000013200)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000002", 0x1b, 0x11580}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r2, 0x0) 21:56:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) [ 2882.665007][T12282] loop5: detected capacity change from 0 to 512 [ 2882.820970][T12282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2882.830669][T12282] ext4 filesystem being mounted at /root/syzkaller-testdir1582486900/syzkaller.lEjA1v/3138/file0 supports timestamps until 2038 (0x7fffffff) 21:56:11 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 21:56:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x0) lseek(r0, 0x0, 0x4) 21:56:11 executing program 1: unshare(0xc040400) r0 = inotify_init1(0x0) fdatasync(r0) 21:56:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c5c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000e600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000140)=ANY=[]) 21:56:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 21:56:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 21:56:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:12 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 21:56:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c5c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000e600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000140)=ANY=[]) 21:56:12 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 21:56:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4bfa) 21:56:13 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="1f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000780)="ce", 0x1}, {&(0x7f0000000800)="a5", 0x1}, {&(0x7f00000019c0)="93", 0x1}, {&(0x7f0000000900)='s', 0x1}, {&(0x7f0000001a80)='2', 0x1}, {&(0x7f0000001b80)='C', 0x1}, {&(0x7f0000001c00)='\t', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e00)="e3", 0x1}, {&(0x7f0000001e80)="e1", 0x1}, {&(0x7f0000001f00)='4', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002140)=')', 0x1}, {&(0x7f0000002180)="05", 0x1}, {&(0x7f0000002200)=')', 0x1}, {&(0x7f00000022c0)="d6", 0x1}, {&(0x7f0000002300)="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", 0xd01}, {&(0x7f0000003380)="d6", 0x1}, {&(0x7f0000003440)="9d", 0x1}], 0x7}}], 0x5, 0x60c5814) [ 2883.401238][T12301] loop5: detected capacity change from 0 to 1054 [ 2883.475041][T12301] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2883.534484][T12301] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2883.534732][T12301] EXT4-fs error (device loop5): ext4_quota_enable:6834: comm syz-executor.5: Bad quota inode # 3 [ 2883.562663][T12301] EXT4-fs warning (device loop5): ext4_enable_quotas:6874: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2883.562797][T12301] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 2883.562893][T12301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2883.709713][T12308] loop1: detected capacity change from 0 to 64 [ 2883.734694][T12308] FAT-fs (loop1): bogus number of FAT sectors [ 2883.734777][T12308] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2884.127165][T12315] loop5: detected capacity change from 0 to 1054 [ 2884.196612][T12315] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2884.257234][T12315] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2884.257856][T12315] EXT4-fs error (device loop5): ext4_quota_enable:6834: comm syz-executor.5: Bad quota inode # 3 [ 2884.259238][T12315] EXT4-fs warning (device loop5): ext4_enable_quotas:6874: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2884.259373][T12315] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 2884.259470][T12315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 21:56:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004103) 21:56:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c5c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000e600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000140)=ANY=[]) 21:56:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:14 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 21:56:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x8001}], 0x80, &(0x7f00000001c0)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x298801, &(0x7f00000008c0)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_gt={'euid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) 21:56:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b52) [ 2885.483354][T12330] loop5: detected capacity change from 0 to 1054 21:56:14 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) [ 2885.593073][T12330] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2885.652811][T12330] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2885.659424][T12330] EXT4-fs error (device loop5): ext4_quota_enable:6834: comm syz-executor.5: Bad quota inode # 3 [ 2885.706722][T12337] loop1: detected capacity change from 0 to 128 [ 2885.729271][T12330] EXT4-fs warning (device loop5): ext4_enable_quotas:6874: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2885.747151][T12330] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 2885.754459][T12330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 21:56:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c5c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="20000000e600000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000140)=ANY=[]) 21:56:15 executing program 4: openat$vga_arbiter(0xffffff9c, &(0x7f0000001880), 0x4000, 0x0) 21:56:15 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 2886.199062][T12337] FAT-fs (loop1): bogus number of FAT sectors [ 2886.205632][T12337] FAT-fs (loop1): Can't find a valid FAT filesystem 21:56:15 executing program 0: r0 = openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x7) 21:56:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfffffff9, 0x0, 0x0, "c200797f82136ab8deb5323dcd50f8bef1dcc0"}) [ 2886.555968][T12355] loop5: detected capacity change from 0 to 1054 21:56:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000bac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2886.673054][T12355] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 2886.726283][T12355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2886.733247][T12355] EXT4-fs error (device loop5): ext4_quota_enable:6834: comm syz-executor.5: Bad quota inode # 3 21:56:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:15 executing program 0: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ftruncate(r0, 0x0) [ 2886.781059][T12355] EXT4-fs warning (device loop5): ext4_enable_quotas:6874: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 2886.795977][T12355] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 2886.802975][T12355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 21:56:15 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) 21:56:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000440), 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 21:56:16 executing program 3: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x67b) unshare(0x40000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e04168", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x80044) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 21:56:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000100) 21:56:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x1, 0xffff8000, 0x0, 0x1}, 0x48) 21:56:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x5408) 21:56:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') sendfile(r0, r0, &(0x7f0000000000)=0x9, 0x6) 21:56:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x5408) [ 2888.005884][T12384] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.3'. 21:56:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 21:56:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x9, 0x1ff, 0x8}) 21:56:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 21:56:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 21:56:19 executing program 3: ustat(0x6, &(0x7f0000000300)) 21:56:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7, 0x2}) 21:56:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) 21:56:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 21:56:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 21:56:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x1, 0xffff8000, 0x0, 0x1}, 0x48) 21:56:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b34) 21:56:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)) 21:56:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, 0x0, 0x0) 21:56:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 21:56:20 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) 21:56:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 21:56:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) 21:56:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b30) 21:56:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) [ 2891.710801][T12428] loop5: detected capacity change from 0 to 16 21:56:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, 0x0, 0x0) 21:56:20 executing program 3: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) [ 2891.961347][T12428] bio_check_eod: 4 callbacks suppressed [ 2891.961411][T12428] syz-executor.5: attempt to access beyond end of device [ 2891.961411][T12428] loop5: rw=2049, want=17, limit=16 [ 2891.979835][T12428] Buffer I/O error on dev loop5, logical block 16, lost async page write 21:56:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x1, 0xffff8000, 0x0, 0x1}, 0x48) 21:56:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x541d) 21:56:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) 21:56:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) 21:56:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:56:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, 0x0, 0x0) [ 2892.975313][T12446] loop5: detected capacity change from 0 to 16 [ 2893.012860][T12449] loop3: detected capacity change from 0 to 16 21:56:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x402c542d) 21:56:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x541d) 21:56:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) 21:56:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) 21:56:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) 21:56:22 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x125001, 0x0) [ 2893.929224][T12468] loop3: detected capacity change from 0 to 16 [ 2893.930226][T12467] loop5: detected capacity change from 0 to 16 21:56:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x1, 0xffff8000, 0x0, 0x1}, 0x48) 21:56:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) 21:56:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x541d) 21:56:23 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x125001, 0x0) 21:56:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) 21:56:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0xd5) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0x22) sendfile(r1, r1, &(0x7f0000000240), 0x7ffc) [ 2894.903556][T12480] loop3: detected capacity change from 0 to 16 21:56:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 21:56:24 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x125001, 0x0) [ 2895.141366][T12489] loop5: detected capacity change from 0 to 16 21:56:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) listen(r0, 0x3000000) sendto$inet(r0, &(0x7f0000000080)="b8", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="92", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) [ 2895.259132][T12480] syz-executor.3: attempt to access beyond end of device [ 2895.259132][T12480] loop3: rw=2049, want=17, limit=16 [ 2895.274920][T12480] Buffer I/O error on dev loop3, logical block 16, lost async page write 21:56:24 executing program 0: openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x125001, 0x0) 21:56:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)) 21:56:24 executing program 3: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x1000000) 21:56:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000001600)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="70000000040100000104000050527f84bf9a8d81c03cd22d5aad9bcfddab8e9e5e4894093950eb8d6a2245ebd0854798add4d36b44b5a45ba7ff6eddfe6b8935482ca7d713d04ef268a8d5a700f723db386755ff90b0b48afb98023acc60061bfbc2b668c3df66ee997dd19b944fb06010"], 0x80}, 0x0) 21:56:25 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000120000002200000060", 0xd, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x839, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x8000}, {&(0x7f0000011e00)="02", 0x1, 0x8400}, {&(0x7f0000011f00)="03", 0x1, 0x8800}, {&(0x7f0000012100), 0x0, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003", 0x3d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af302000400000000000000000000000200000010000000020000000100000013", 0x49, 0x11180}, {&(0x7f0000013200)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000002", 0x1b, 0x11580}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r2, 0x0) 21:56:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0, 0x196, &(0x7f0000000080)}) 21:56:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0x0, "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"}) 21:56:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24}, 0x24}}, 0x0) 21:56:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x5437) 21:56:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f000055a000/0x4000)=nil, &(0x7f000041d000/0x3000)=nil, 0x0, 0x0) 21:56:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) 21:56:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="2484ef1cb300a785a600a8eee4883ddd", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000b00)="cb1e983bacee44633ecac208f51436273d", 0x11}, {&(0x7f0000000f80)="d3", 0x1}], 0x2}}], 0x2, 0x0) 21:56:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000000000000000010000d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 21:56:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4bfa, &(0x7f0000000040)) [ 2897.081526][T12515] loop4: detected capacity change from 0 to 512 [ 2897.287079][T12515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2897.296803][T12515] ext4 filesystem being mounted at /root/syzkaller-testdir3982804876/syzkaller.MRLKRA/2723/file0 supports timestamps until 2038 (0x7fffffff) 21:56:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b2f) 21:56:26 executing program 3: r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 21:56:26 executing program 4: r0 = openat$bsg(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/25, 0x19) 21:56:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') fadvise64(r0, 0x0, 0x0, 0x0) 21:56:26 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:56:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b66) 21:56:26 executing program 0: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) 21:56:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f000055a000/0x4000)=nil, &(0x7f000041d000/0x3000)=nil, 0x0, 0x0) 21:56:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r3, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f000055a000/0x4000)=nil, &(0x7f000041d000/0x3000)=nil, 0x0, 0x0) 21:56:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, 0x0) 21:56:27 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="02008c2f4c54338309faffffff00000005001100d0000000e8a26fcde0f83066f280765d9e66c3a2199c9e027dd15f87a9b81e687bf3227a2ed2cdb4e225222753b52222427b0513706443f6d4302687cb84b14c51787e320087779c22c85d06000000000000009aec121a869777c5ca0b6891a61a817439c06f853c9db691"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xa301711a09fc7e7e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r2}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x67b) unshare(0x40000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21800800}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="10006e80040020349002000400010004000200050008000300000011000700d251cef441baf8652429a13e3e0000000c00986e0500020002000000090007001377fc0d80000000"], 0x60}, 0x1, 0x0, 0x0, 0x20040044}, 0x80044) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x406f408, 0x0) 21:56:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000068000100001000de0b7688963373cd0000001e00040002"], 0x1c}}, 0x0) 21:56:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_LK(r2, &(0x7f0000001100)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000003180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) [ 2898.343326][T12558] EXT4-fs warning (device sda1): __ext4_ioctl:1176: Setting inode version is not supported with metadata_csum enabled. 21:56:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x5428) 21:56:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10000, 0x4) 21:56:27 executing program 0: r0 = syz_open_dev$media(&(0x7f0000002980), 0x0, 0x0) fcntl$getown(r0, 0x9) 21:56:27 executing program 5: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) pipe2$watch_queue(&(0x7f00000028c0), 0x80) 21:56:27 executing program 3: close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080), 0x10) 21:56:28 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 21:56:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_bond\x00', 0x1}) 21:56:28 executing program 0: r0 = syz_io_uring_setup(0x69a8, &(0x7f00000000c0)={0x0, 0xbb35}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 21:56:28 executing program 5: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = syz_io_uring_setup(0x69a8, &(0x7f00000000c0)={0x0, 0xbb35, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_io_uring_setup(0xc04, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 21:56:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b3b, &(0x7f0000000000)) 21:56:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)) read$dsp(r0, &(0x7f0000000180)=""/220, 0xdc) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 21:56:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r6, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r8 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r8, 0x400c744d, &(0x7f0000000540)) signalfd4(r8, &(0x7f0000000100)={[0xffffffffffffeb3c]}, 0xffffffffffffff7f, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x2f, 0x20, 0x20, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x8000, 0x7800, 0x5a, 0x5}}) 21:56:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x2, 0x9}) 21:56:28 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x16, &(0x7f00000018c0)={0x0, 0x0, 0x18}, 0xc) 21:56:29 executing program 4: socketpair(0x2, 0xa, 0x8, &(0x7f0000000000)) [ 2899.954772][T12592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @restrict={0x2}]}, {0x0, [0x0]}}, &(0x7f00000000c0)=""/164, 0x3f, 0xa4, 0x1}, 0x20) 21:56:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000005c0)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xee, &(0x7f0000000640)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xe, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff]}, 0x80) 21:56:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2160) [ 2900.172995][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:29 executing program 4: socketpair(0x26, 0x5, 0x0, &(0x7f0000000200)) 21:56:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev, 'macsec0\x00'}}, 0x80) 21:56:29 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000040)={0x0, 0x0}, 0x10) 21:56:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x18}}], 0x2, 0x0) 21:56:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 21:56:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r6, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r8 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r8, 0x400c744d, &(0x7f0000000540)) signalfd4(r8, &(0x7f0000000100)={[0xffffffffffffeb3c]}, 0xffffffffffffff7f, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x2f, 0x20, 0x20, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x8000, 0x7800, 0x5a, 0x5}}) 21:56:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r1, 0x5, 0x6}, 0x10) 21:56:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000000)=@raw=[@cb_func, @call, @initr0, @map_idx_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000140), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x48) 21:56:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000001c0)) 21:56:30 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r0, &(0x7f0000000000)=""/45, 0x2d, 0x100, 0x0, 0x0) 21:56:30 executing program 3: select(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f00000001c0)) 21:56:30 executing program 5: r0 = syz_io_uring_setup(0x6fd4, &(0x7f0000000040), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x6, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3cae, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) io_uring_enter(r0, 0x283c, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x88a02, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000280)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21f23e1e30e035e0de59c6fcc6e4abf3164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e", 0xe3}, {&(0x7f0000000040)="6f634f013b6f463bca666cd0d6f16337352c78e606ed6c682a60fb", 0x1b}], 0x2) dup(r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:56:30 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x84400, 0x0) [ 2901.413711][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0x40305839, 0x0) 21:56:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x11, &(0x7f0000000100)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x1, [{0x0, 0x0}]}) [ 2901.701955][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:30 executing program 3: syz_open_dev$evdev(&(0x7f0000002240), 0x0, 0x4000) 21:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x2f}, @void}}}, 0x1c}}, 0x0) 21:56:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r6, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r8 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r8, 0x400c744d, &(0x7f0000000540)) signalfd4(r8, &(0x7f0000000100)={[0xffffffffffffeb3c]}, 0xffffffffffffff7f, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x2f, 0x20, 0x20, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x8000, 0x7800, 0x5a, 0x5}}) 21:56:31 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@dmm={0x7, 0x24, 0x14, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 21:56:31 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x603, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) 21:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x4c}}, 0x0) [ 2902.843029][ T4722] usb 1-1: new high-speed USB device number 78 using dummy_hcd 21:56:32 executing program 5: r0 = syz_io_uring_setup(0x6fd4, &(0x7f0000000040), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x6, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3cae, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) io_uring_enter(r0, 0x283c, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x88a02, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000280)="2709294520f65fb1b3bf976c572ace99709756627eaabdd0a04ddd6950af95c82dea955da0976b21f23e1e30e035e0de59c6fcc6e4abf3164043d061313d1a8391ebb58fb734c49553aeabd7848b12402ca522eeacd53d05d520fb1bd28dededbefed9c38d259802f36b2ebd460b1fae9264984f9fb5c98a21efebdcbf1a055e89a73b147e506080465046eb04f9244e08d970e79e6aa89fe29e9f68a76e18ed79c891b2c3d1575b733ccead2b11f95098f2f04cbadc148ea6296c3fb091d9f362b87744372ba71ca8345ed08e42d069a7e7bfc8def377049b339bb0e6c50edf80559e", 0xe3}, {&(0x7f0000000040)="6f634f013b6f463bca666cd0d6f16337352c78e606ed6c682a60fb", 0x1b}], 0x2) dup(r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21:56:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000001c0)=0x9, 0x4) [ 2903.233838][T24932] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2903.397066][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2903.442818][T24929] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2903.473146][ T4722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2903.484511][ T4722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2903.494852][ T4722] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2903.504963][ T4722] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2903.515135][ T4722] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2903.525430][ T4722] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2903.588499][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, "6e3084ff6ad177579a337f1b10db17170b0ca6"}) [ 2904.053081][ T4722] usb 1-1: string descriptor 0 read error: -22 [ 2904.059821][ T4722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2904.070809][ T4722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 21:56:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r6, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r8 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r8, 0x400c744d, &(0x7f0000000540)) signalfd4(r8, &(0x7f0000000100)={[0xffffffffffffeb3c]}, 0xffffffffffffff7f, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x2f, 0x20, 0x20, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x8000, 0x7800, 0x5a, 0x5}}) 21:56:33 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) [ 2904.583704][ T4722] cdc_ncm 1-1:1.0: bind() failure [ 2904.598768][T24932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2904.599703][ T4722] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2904.610301][T24932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2904.616869][ T4722] cdc_ncm 1-1:1.1: bind() failure [ 2904.626678][T24932] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2904.641592][T24932] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2904.651583][T24932] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2904.661458][T24932] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2904.708704][T24932] usb 5-1: language id specifier not provided by device, defaulting to English [ 2904.718305][T24929] usb 4-1: Using ep0 maxpacket: 8 [ 2904.913315][ T4722] usb 1-1: USB disconnect, device number 78 [ 2905.103473][T24929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2905.117488][T24932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2905.126901][T24932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.135138][T24932] usb 5-1: Product: syz [ 2905.139442][T24932] usb 5-1: Manufacturer: syz [ 2905.144313][T24932] usb 5-1: SerialNumber: syz 21:56:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 21:56:34 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x4000832, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r0) syz_io_uring_setup(0x463e, &(0x7f0000000340), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 2905.163995][T24929] usb 4-1: language id specifier not provided by device, defaulting to English [ 2905.303582][T24929] usb 4-1: New USB device found, idVendor=0603, idProduct=0600, bcdDevice= 0.40 [ 2905.312975][T24929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.321145][T24929] usb 4-1: Product: syz [ 2905.325572][T24929] usb 4-1: Manufacturer: syz [ 2905.330302][T24929] usb 4-1: SerialNumber: syz [ 2905.357787][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:34 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4541) [ 2905.455356][T24932] cdc_ncm 5-1:1.0: bind() failure [ 2905.471558][T24932] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2905.479234][T24932] cdc_ncm 5-1:1.1: bind() failure 21:56:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r0, 0x0, 0x17) [ 2905.591170][T24929] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 2905.685129][T24932] usb 5-1: USB disconnect, device number 19 [ 2905.705704][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2905.789364][T24929] usb 4-1: USB disconnect, device number 72 21:56:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x2, 0x5, 0x0, 'syz1\x00'}}) 21:56:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000540)) 21:56:35 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 21:56:35 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000002100)=0x4) 21:56:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @local}, 0xa, {0x2, 0x0, @remote}, 'veth1_virt_wifi\x00'}) 21:56:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:56:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r7, 0x400c744d, &(0x7f0000000540)) signalfd4(r7, &(0x7f0000000100)={[0xffffffffffffeb3c]}, 0xffffffffffffff7f, 0x800) [ 2906.513329][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='Y', 0x1}], 0x1}, 0x0) 21:56:35 executing program 5: syz_clone(0xc0901000, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000440)=0x7fffffff, 0x4) 21:56:35 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x12, 0x611, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x5}}, 0x4c}}, 0x0) [ 2906.726339][T12705] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2906.763048][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x33, 0x15}) 21:56:36 executing program 5: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="c69d02a1563b13683e7f436fbcc29a5968201a20f76c65703ec67eab08b95f1505849355685ce4b17ecd079024a765e55facc0072313c26934e6c2d42a5dadb981", 0x41, 0x40}], 0x410, 0x0) 21:56:36 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000d80)={0x2d, 0x1, '}'}) 21:56:36 executing program 0: pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) fcntl$setpipe(r0, 0x407, 0x20fffff) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) 21:56:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00c', 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000005c0)=ANY=[]) 21:56:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000003600)='./file0/../file0/file0\x00', 0x0, 0x4, &(0x7f0000003900)=[{&(0x7f0000003640)="fe571c835471ba6f42df048554d2ed23ff59dfac668db8251a5b682d7e6ae0e897e07b341d0cd299befa890a6cc99bfbf861c33359acab5217578fb82570f57f309d5d99192c46f4b996ba79f8d59fc8423c56aedf1b26c441d78a532d37cbd84249ad613e811e6b296b61b93037212bd22273fe039e5626fd1ae8b5f56e8d234b9e8c084a47fe5a6de9a7a55ddc0c800ad83b7dac0652a00a3270d797471da7e45b3634b0622fe6a56627d866bbaf2e9fd4be0ee79b70606fdb53", 0xbb, 0x2}, {&(0x7f0000003740)="60e378f3b8ec8a893104c5a0cddda27f011a071e5007f3c42b2d5b59f0f79f0650fee55076d9adcb533798e54b6899986554e456049d9ed6affd8640d6a55a52f5864c861e1ce4579a54369ce6982aa6ac98", 0x52, 0x8000}, {&(0x7f0000003800), 0x0, 0x9}, {&(0x7f00000038c0)="dbb9eb", 0x3}], 0x4000, &(0x7f0000003980)={[{@nodots}, {@nodots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\':&'}}]}) 21:56:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r7, 0x400c744d, &(0x7f0000000540)) 21:56:36 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2907.469875][T12725] loop2: detected capacity change from 0 to 512 21:56:36 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) fsmount(r0, 0x0, 0x80) [ 2907.581772][T12725] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 21:56:36 executing program 0: lstat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x115042, 0x0) [ 2907.636987][T12728] loop3: detected capacity change from 0 to 128 [ 2907.724261][T12725] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz-executor.2: bad orphan inode 99 [ 2907.738094][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2907.763497][T12725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 21:56:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000035c0), &(0x7f0000003600)='./file0/../file0/file0\x00', 0x0, 0x1, &(0x7f0000003900)=[{&(0x7f0000003640)="fe", 0x1}], 0x0, &(0x7f0000003980)) 21:56:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) statx(r0, &(0x7f0000002000)='./file0\x00', 0x0, 0x0, 0x0) 21:56:36 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) 21:56:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000035c0), &(0x7f0000003600)='./file0/../file0/file0\x00', 0x0, 0x1, &(0x7f0000003900)=[{&(0x7f0000003640)="fe", 0x1}], 0x0, 0x0) [ 2907.917552][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:37 executing program 0: syz_io_uring_setup(0x4b47, &(0x7f0000000b00)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) [ 2908.277553][T12746] FAT-fs (loop3): bogus number of reserved sectors [ 2908.284609][T12746] FAT-fs (loop3): Can't find a valid FAT filesystem 21:56:37 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 21:56:37 executing program 4: syz_mount_image$btrfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@flushoncommit}]}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 21:56:37 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, &(0x7f0000000180)={[{@huge_advise}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x0]}}}}, {@huge_always}]}) syz_mount_image$squashfs(&(0x7f0000000240), 0x0, 0x0, 0x5, &(0x7f0000001900)=[{&(0x7f00000002c0)}, {0x0}, {0x0}, {&(0x7f0000000640)}, {0x0}], 0x0, &(0x7f0000001a00)={[{'mode'}], [{@euid_gt}]}) statx(0xffffffffffffffff, &(0x7f0000001f00)='./file0\x00', 0x2000, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000003840), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003880)='coredump_filter\x00') 21:56:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGIDLE(r7, 0x400c744d, &(0x7f0000000540)) 21:56:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000600600100000f000000000000000100000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d225", 0x62, 0x400}], 0x0, &(0x7f0000000180)) 21:56:37 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) 21:56:37 executing program 5: syz_mount_image$btrfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x410, &(0x7f0000000640)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@noflushoncommit}, {@noinode_cache}], [{@smackfsdef={'smackfsdef', 0x3d, '\'::\x8e(%^,+\\\\\\'}}]}) [ 2908.792665][T12761] loop3: detected capacity change from 0 to 4 [ 2908.826505][T12761] EXT4-fs (loop3): unsupported descriptor size 0 21:56:37 executing program 2: syz_mount_image$btrfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 21:56:37 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000b00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 21:56:38 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f0000003900)=[{&(0x7f0000003740)='`', 0x1, 0x8000}, {&(0x7f00000038c0)="db", 0x1}], 0x0, 0x0) 21:56:38 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close(r0) [ 2909.074246][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2909.245697][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:38 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ehci_hcd', 0x0, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 21:56:38 executing program 5: pselect6(0x40, &(0x7f0000000400), &(0x7f0000000440)={0x2}, &(0x7f0000000480)={0x7}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x3]}, 0x8}) 21:56:38 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ehci_hcd', 0x10080, 0x0) [ 2909.361892][T12776] loop3: detected capacity change from 0 to 128 21:56:38 executing program 0: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0xc01cb788aeccbf3a) 21:56:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGIDLE(r7, 0x400c744d, &(0x7f0000000540)) 21:56:38 executing program 3: sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) 21:56:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x0) 21:56:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x37e, 0x4206, 0x1, 0x0, 0xf3, 0x1}, &(0x7f0000000080)={0x4, 0x0, 0x3, 0x6, 0xa7, 0x13ff, 0x4, 0x42}, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xeed8}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x6e9d}]}) 21:56:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000840), 0x0, 0x0, 0x3, &(0x7f0000001cc0)=[{&(0x7f00000008c0)='P', 0x1}, {&(0x7f0000000b80)='.', 0x1, 0x100000001}, {&(0x7f0000001c40)="dc", 0x1, 0x7fffffff}], 0x0, &(0x7f0000001dc0)) 21:56:38 executing program 0: r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100b, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000000000001000c00d00002000400000026010000000004000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486aa4581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000020000000240"], 0x0) [ 2910.006830][ T24] audit: type=1326 audit(1650664599.036:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12788 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47549 code=0x0 [ 2910.035860][T12791] loop4: detected capacity change from 0 to 264192 21:56:39 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000e00), 0x1a9300, 0x0) 21:56:39 executing program 0: r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100b, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000020000000240"], 0x0) 21:56:39 executing program 3: syz_mount_image$msdos(&(0x7f00000021c0), 0x0, 0x0, 0x0, &(0x7f0000003240), 0x0, &(0x7f0000003280)) fsmount(0xffffffffffffffff, 0x0, 0x0) 21:56:39 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174df0204090a0200027400f8", 0x16}], 0x0, &(0x7f0000000380)) 21:56:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), r0) [ 2910.234138][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2910.435065][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:39 executing program 5: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001f00)=""/49) [ 2910.498267][T12809] loop4: detected capacity change from 0 to 264192 [ 2910.583208][T12809] FAT-fs (loop4): bogus logical sector size 735 [ 2910.589828][T12809] FAT-fs (loop4): Can't find a valid FAT filesystem 21:56:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r7 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGIDLE(r7, 0x400c744d, &(0x7f0000000540)) 21:56:40 executing program 0: syz_mount_image$btrfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="c69d02a1563b13683e7f436fbcc29a5968201a20f76c65703ec67eab08b95f1505849355685ce4b17ecd079024a765e55facc0072313c26934e6c2d42a5dadb9816106eaff568476cc19f565533e7ee8b6f52e69bf1db59ebc4b16c6fe46b54b8c1285807a3b69a1acd2ce60fcb2988daff5a8da362ba36100ebccfd", 0x7c, 0x40}], 0x410, &(0x7f0000000640)={[{@flushoncommit}, {@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@barrier}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@noflushoncommit}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@noinode_cache}, {@rescan_uuid_tree}], [{@smackfsdef={'smackfsdef', 0x3d, '\'::\x8e(%^,+\\\\\\'}}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xdb, 0x7, 0x8, 0x0, 0x3, 0x3e, 0x3, 0x1b2, 0x40, 0x1be, 0x3, 0x4, 0x38, 0x1, 0x2, 0x6, 0x63f8}, [{0x6474e557, 0x40800000, 0x8000, 0x5, 0x80, 0x5, 0x9, 0x2}, {0x2, 0xb6, 0x8000000000000001, 0x2, 0x7fff, 0xcb, 0x1, 0x8}], "1074f6f7a65cca48ab5c0434846dab61967be660bc77da1da2393fe483e598262a9f6d0595786c15a3afdf222fecaff1e2b7146357ba295140f4988c88c45b9b5226de8a0b691fe770d27ae0b9cca6a192330e68454fd5467505c4e1f108399425dcec3e356c34b74e204406acfcd9a53bc9fe3ba5de760aff25379f0a6541737dc84cc2f6b157054e19596b190ca6efcd8ba7e71e888bcb6d4dc1d58eb2c3e5b5d6d7d8e1d80420a7a4ef1b1e2319416352a9c6f97bfdf874b561fa465cf020796b8dbfda0374ca31d0663e4b3ba87bb9dd436d44cab2ddea8ad343", ['\x00', '\x00', '\x00']}, 0x48c) 21:56:40 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20}, 0x20}}, 0x0) 21:56:40 executing program 3: timer_create(0x0, 0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {r0}}, 0x0) 21:56:40 executing program 4: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x4b47, &(0x7f0000000b00)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) 21:56:40 executing program 5: timer_create(0x0, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000380), 0x0) [ 2911.140675][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 2911.147871][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 21:56:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="e31beafe67b693fce97d34ed88ea026befad075c47ca5ad1b6650bb9cd702f7129688369417308bf7543c403219e76b9549997faf824e585ea71021ce6836ac36aa0b8b024f50b8c3807f189a8fb5f71491c0d8ea21688782c35b09a5a8d30a8", 0x60, 0x4598a4df}, {0x0}, {&(0x7f0000000340)="0b126b66342bcee1e73bb38d2cbaea34756c7f5f7a5caf55b76abc76600a91d044f984bf374d4e16d1ba5669bcb75eca53a70c169bed3c8c02a1d18321a558d7a33bfbad934075778d99bbe0051099515128", 0x52, 0x7}], 0x0, &(0x7f0000000540)={[{@barrier}, {@mblk_io_submit}], [{@fsmagic={'fsmagic', 0x3d, 0x45e4ba8a}}, {@euid_eq}, {@obj_user}]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x40448d4) setxattr$security_capability(&(0x7f0000001fc0)='./file0/../file0\x00', &(0x7f0000002000), &(0x7f0000002040)=@v1={0x1000000, [{0x58}]}, 0xc, 0x3) socket$unix(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000035c0), &(0x7f0000003600)='./file0/../file0/file0\x00', 0x0, 0x3, &(0x7f0000003900)=[{&(0x7f0000003640)="fe571c835471ba6f42df048554d2ed23ff59dfac668db8251a5b682d7e6ae0e897e07b341d0cd299befa890a6cc99bfbf861c33359acab5217578fb82570f57f309d5d99192c46f4b996ba79f8d59fc8423c56aedf1b26c441d78a532d37cbd84249ad613e811e6b296b61b93037212bd22273fe039e5626fd1ae8b5f56e8d234b9e8c084a47fe5a6de9a7a55ddc0c800ad83b7dac0652a00a3270d797471da7e45b3634b0622fe6a56627d866bbaf2e9fd4be0ee79b70606fdb53f098762f864cb9d2419cf18b7464a6f14cf2b0544bbe4e0c4403751370b240f6a28305373e8fdaeab21dff4a9f8fe08b01", 0xec}, {&(0x7f0000003740)="60e378f3b8ec8a893104c5a0cddda27f011a071e5007f3c42b2d5b59f0f79f0650fee55076d9adcb533798e54b6899", 0x2f, 0x8000}, {0x0}], 0x0, &(0x7f0000003980)={[{@nodots}, {@nodots}, {@dots}, {@fat=@nfs}, {@dots}, {@dots}, {@nodots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\':&'}}, {@dont_hash}, {@dont_measure}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000003a00)='./file0/../file0/file1\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x20004890) 21:56:40 executing program 3: openat(0xffffffffffffffff, 0x0, 0x424140, 0x0) 21:56:40 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20}, 0x20}}, 0x0) 21:56:40 executing program 4: syz_mount_image$msdos(&(0x7f00000035c0), 0x0, 0x0, 0x1, &(0x7f0000003900)=[{&(0x7f0000003740)='`', 0x1, 0x8000}], 0x0, &(0x7f0000003980)) 21:56:40 executing program 0: syz_mount_image$btrfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)) [ 2911.667459][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2911.734136][T12828] loop2: detected capacity change from 0 to 264192 [ 2911.752424][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2911.847621][T12835] loop4: detected capacity change from 0 to 128 21:56:41 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x64) 21:56:41 executing program 3: bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) socketpair(0x2b, 0x0, 0xfffffffd, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) 21:56:41 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0) syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000038c0)='./file1\x00', &(0x7f0000003940)={{}, {0x0, 0xea60}}, 0x0) 21:56:41 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/ram3', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x2c}}, 0x0) syz_io_uring_setup(0x104c, &(0x7f00000005c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x10}, 0x10}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x4b47, &(0x7f0000000b00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) 21:56:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x400c744d, &(0x7f0000000540)) 21:56:41 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 21:56:41 executing program 5: syz_io_uring_setup(0x4b47, &(0x7f0000000b00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) 21:56:41 executing program 0: syz_mount_image$btrfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000400)=[{0x0}], 0x0, &(0x7f0000000540)) syz_mount_image$msdos(&(0x7f00000035c0), 0x0, 0x0, 0x1, &(0x7f0000003900)=[{0x0}], 0x0, 0x0) 21:56:41 executing program 2: syz_mount_image$btrfs(&(0x7f0000000500), 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="c69d02a1563b13683e7f436fbcc29a5968201a20f76c65703ec67eab08b95f1505849355685ce4b17ecd079024a765e55facc0072313c26934e6c2d42a5dadb9816106eaff568476cc19f565533e7ee8b6f52e69bf1db59ebc4b16c6fe46b54b8c1285807a3b69a1acd2ce60fcb2988daff5a8da362ba36100ebccfd", 0x7c, 0x40}], 0x410, &(0x7f0000000640)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@compress_algo={'compress', 0x3d, 'no'}}, {@noflushoncommit}, {@noinode_cache}, {@rescan_uuid_tree}]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xdb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1b2, 0x40, 0x1be, 0x0, 0x4, 0x38, 0x1}, [{0x6474e557, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2}, {0x2, 0x0, 0x8000000000000001, 0x0, 0x7fff, 0xcb}], "1074f6f7a65cca48ab5c0434846dab61967be660bc77da1da2393fe483e598262a9f6d0595786c15a3afdf222fecaff1e2b7146357ba295140f4988c88c45b9b5226de8a0b691fe770d27ae0b9cca6a192330e68454fd5467505c4e1f108399425dcec3e356c34b74e204406acfc", ['\x00', '\x00', '\x00']}, 0x41e) 21:56:42 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)='1') process_vm_readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/198, 0xc6}], 0x4, &(0x7f00000005c0)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) [ 2912.923019][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:42 executing program 5: socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/ram3', 0x8500, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x38}}, 0x0) syz_io_uring_setup(0x104c, &(0x7f00000005c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x4b47, &(0x7f0000000b00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) [ 2913.152266][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000003600)='./file0/../file0/file0\x00', 0x1, 0x4, &(0x7f0000003900)=[{&(0x7f0000003640)="fe", 0x1, 0x2}, {&(0x7f0000003740)='`', 0x1, 0x8000}, {&(0x7f0000003800)="f1", 0x1, 0x9}, {&(0x7f00000038c0)="dbb9eb", 0x3}], 0x0, &(0x7f0000003980)={[{@nodots}, {@dots}]}) 21:56:42 executing program 3: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0) 21:56:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002c40)='net/fib_trie\x00') readahead(r0, 0x0, 0x0) 21:56:42 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 21:56:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x400c744d, &(0x7f0000000540)) 21:56:42 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 21:56:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000001fc0)='./file0/../file0\x00', &(0x7f0000002000), &(0x7f0000002040), 0xc, 0x0) 21:56:42 executing program 4: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x8, &(0x7f0000001cc0)=[{&(0x7f0000000940)="603fce4b6c5ae9b71e8797abfcdfa723bd08", 0x12}, {&(0x7f0000000980)="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", 0xfd, 0xcd}, {&(0x7f0000000a80)="e3873b50645c6f1e339e21bb52233672f67e912dc21024fb93a5dc08db38", 0x1e}, {&(0x7f0000000ac0)="f9a11184dd6a40ef4efe648de9c2997d73cd4cfcbd5d5cd3d5cc25c2279a5fb11e5db204a050b85aa4a210ff54be5feff10c4226a4de3a45897260cdf59bf22616486ae5ad19f5a16e101fa0e3f2c86f27c2ece1d4a54b3aa75dfb82d74b8f9b59b4", 0x62, 0x1}, {&(0x7f0000000b40)="4fc609389e5605a31e2785ed5743886f4bb0273955807d6e1cc8deefabaa188e65d1b6b236975a3c54f973e74fdbbdf9193d015ab3f594", 0x37}, {&(0x7f0000000b80)="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", 0x1000, 0x100000001}, {&(0x7f0000001b80)="112955a754df71839449f69459489f73b1b95aa25144593a5a7a08bd8442b79dff0d04b0c71b26d0d97e831bfcda282f90a6e6ea99a5236ac737237565981ad35fb8903e1108d71a553b6b06775468ce4264782288df4fb4b87d3354e6be14561bd62fa5c7e7a6a9648aac7be3cb3a1bb12f2884d568b6418aba537d2ade76eef5c1062cb45d00590c4889553dbc2ff4da44", 0x92, 0x10001}, {0x0, 0x0, 0x7fffffff}], 0x216408, &(0x7f0000001dc0)={[{@dots}, {@fat=@nfs_nostale_ro}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}], [{@subj_role={'subj_role', 0x3d, 'obj_user'}}, {@hash}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '/\x1b%'}}]}) 21:56:42 executing program 2: syz_mount_image$btrfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x40}], 0x0, &(0x7f0000000640)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noflushoncommit}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x2}, [{0x2, 0xb6}], "", ['\x00', '\x00', '\x00']}, 0x378) 21:56:43 executing program 3: r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100b, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000"], 0x0) 21:56:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{0x0}], 0x0, &(0x7f0000000540)) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:56:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000003600)='./file0/../file0/file0\x00', 0x0, 0x3, &(0x7f0000003900)=[{0x0}, {&(0x7f0000003740)='`', 0x1, 0x8000}, {&(0x7f00000038c0)="db", 0x1}], 0x0, &(0x7f0000003980)) [ 2914.232439][T12883] loop4: detected capacity change from 0 to 264192 [ 2914.249336][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:43 executing program 4: setxattr$security_capability(&(0x7f0000001fc0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) 21:56:43 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2914.422941][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2914.443528][T12888] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2914.450575][T12889] loop3: detected capacity change from 0 to 8 21:56:43 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20}, 0x20}}, 0x0) 21:56:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) 21:56:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000640)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x400c744d, &(0x7f0000000540)) 21:56:44 executing program 4: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x43) 21:56:44 executing program 3: r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100b, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000000000001000c00d00002000400000026010000000004000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486aa4581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624670312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000"], 0x0) 21:56:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)) 21:56:44 executing program 0: syz_mount_image$btrfs(0x0, &(0x7f0000000540)='./file0\x00', 0x8, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="c69d02a1563b13683e7f436fbcc29a5968201a20f76c65703ec67eab08b95f1505849355685ce4b17ecd079024a765e55facc0072313c26934e6c2d42a5dadb9816106eaff568476cc19f565533e7ee8b6f52e69bf1db59ebc4b16c6fe46b54b8c1285807a3b69a1acd2ce60fcb2988daff5a8da362ba36100ebccfd", 0x7c, 0x40}], 0x410, &(0x7f0000000640)={[{@flushoncommit}, {@discard}, {@barrier}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@noflushoncommit}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@noinode_cache}, {@rescan_uuid_tree}], [{@smackfsdef={'smackfsdef', 0x3d, '\'::\x8e(%^,+\\\\\\'}}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xdb, 0x7, 0x8, 0x0, 0x3, 0x3e, 0x3, 0x1b2, 0x40, 0x1be, 0x3, 0x4, 0x38, 0x1, 0x2, 0x6, 0x63f8}, [{0x2, 0xb6, 0x8000000000000001, 0x2, 0x7fff, 0xcb, 0x1, 0x8}], "1074f6f7a65cca48ab5c0434846dab61967be660bc77da1da2393fe483e598262a9f6d0595786c15a3afdf222fecaff1e2b7146357ba295140f4988c88c45b9b5226de8a0b691fe770d27ae0b9cca6a192330e68454fd5467505c4e1f108399425dcec3e356c34b74e204406acfcd9a53bc9fe3ba5de760aff25379f0a6541737dc84cc2f6b157054e19596b190ca6efcd8ba7e71e888bcb6d4dc1d58eb2c3e5b5d6d7d8e1d80420a7a4ef1b1e2319416352a9c6f97bfdf874b561fa465cf020796b8dbfda0374ca31d0663e4b3ba87bb9dd436d44cab2ddea8ad343", ['\x00', '\x00', '\x00']}, 0x454) 21:56:44 executing program 5: pselect6(0x40, &(0x7f0000000400), 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x0) [ 2915.248454][T12906] loop3: detected capacity change from 0 to 8 21:56:44 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000380)) 21:56:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 21:56:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000002c0)=""/94) 21:56:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001040)={0x0, 0x8, &(0x7f0000000040)="33abde4417e14d49"}) [ 2915.524498][T12915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:44 executing program 0: syz_open_dev$hiddev(&(0x7f00000017c0), 0x0, 0x600) [ 2915.707256][T12918] loop2: detected capacity change from 0 to 264192 [ 2915.723162][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000300)=""/254) [ 2916.203282][T12918] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 21:56:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x29, 0x2, 0xe0, 0x9, 0x19, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x40a82fa, 0x81}}) r6 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r6, 0x400c744d, &(0x7f0000000540)) 21:56:45 executing program 0: syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x28600) 21:56:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)) 21:56:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:56:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80086601, 0x0) 21:56:45 executing program 4: syz_open_dev$hidraw(&(0x7f0000001c80), 0x0, 0x40002) 21:56:45 executing program 0: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x28000) 21:56:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)) [ 2916.784783][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2916.932766][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2916.992785][T32212] usb 4-1: new high-speed USB device number 73 using dummy_hcd 21:56:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0xc020660b, 0x0) 21:56:46 executing program 2: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) 21:56:46 executing program 4: syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x531082) 21:56:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r6, 0x400c744d, &(0x7f0000000540)) 21:56:46 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7}, [@country_functional={0x6}, @mbim_extended={0x8}, @network_terminal={0x7}, @dmm={0x7}, @mbim={0xc}, @call_mgmt={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x90}}}}}]}}]}}, 0x0) [ 2917.352715][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2917.361980][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2917.433097][T32212] usb 4-1: config 0 descriptor?? 21:56:46 executing program 0: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x3c840) [ 2917.480474][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 21:56:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x6) [ 2917.644125][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2917.882978][ T4722] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2917.908334][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2918.243411][ T4722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2918.254731][ T4722] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2918.265081][ T4722] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2918.275120][ T4722] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2918.442625][ T4722] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2918.451951][ T4722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.460345][ T4722] usb 6-1: Product: syz [ 2918.464844][ T4722] usb 6-1: Manufacturer: syz [ 2918.469569][ T4722] usb 6-1: SerialNumber: syz [ 2918.522528][ T4722] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 2918.602924][T32212] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2918.720004][ T2637] usb 6-1: USB disconnect, device number 67 [ 2919.140011][T32212] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2919.160317][T32212] usb 4-1: USB disconnect, device number 73 21:56:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:56:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001680), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/159) 21:56:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 21:56:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) r5 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r5, 0x400c744d, &(0x7f0000000540)) 21:56:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000002c0)=""/44) 21:56:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x400, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, "5ce30015b6ab4449f25b8569142e77d4206a39fdc2364ee68b861505c4b62cd3"}) 21:56:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/224) [ 2919.762348][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:48 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025d00020105cfea7f"], 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 21:56:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 21:56:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x4) [ 2919.917467][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r4, 0x400c744d, &(0x7f0000000540)) 21:56:49 executing program 0: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) [ 2920.262612][T32212] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2920.363789][ T2637] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2920.427139][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2920.604953][ T2637] usb 6-1: Using ep0 maxpacket: 16 [ 2920.648489][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2920.659199][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2920.691286][T32212] usb 4-1: config 0 descriptor?? [ 2920.733165][ T2637] usb 6-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 2920.741629][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2920.743678][ T2637] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2920.915495][ T2637] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2920.924944][ T2637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.933299][ T2637] usb 6-1: Product: syz [ 2920.937602][ T2637] usb 6-1: Manufacturer: syz [ 2920.942505][ T2637] usb 6-1: SerialNumber: syz [ 2921.233048][ T2637] usb 6-1: USB disconnect, device number 68 [ 2921.863040][T32212] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2922.403252][T32212] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2922.425677][T32212] usb 4-1: USB disconnect, device number 74 21:56:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:56:51 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x87) 21:56:51 executing program 2: bpf$MAP_CREATE(0x16, &(0x7f00000006c0), 0x48) 21:56:51 executing program 0: io_setup(0x0, &(0x7f0000000540)) 21:56:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r4, 0x400c744d, &(0x7f0000000540)) 21:56:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000b40)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) [ 2923.057430][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 21:56:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='sb=0x']) 21:56:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x0, 0x0, 0x4}, 0x48) 21:56:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 21:56:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ff26d2c0e5c0cea0ff"], 0x34) 21:56:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r2, 0x400c744d, &(0x7f0000000540)) [ 2923.466198][T13010] ext2: Bad value for 'sb' [ 2923.512602][ T2637] usb 4-1: new high-speed USB device number 75 using dummy_hcd 21:56:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=cp864,utf8=1,uni_xlate=1']) [ 2923.844949][T13017] FAT-fs (loop2): bogus number of reserved sectors [ 2923.851777][T13017] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2923.913093][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2923.922872][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2923.983793][ T2637] usb 4-1: config 0 descriptor?? [ 2924.029963][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2925.162666][ T2637] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2925.702710][ T2637] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2925.725258][ T2637] usb 4-1: USB disconnect, device number 75 21:56:55 executing program 5: syz_io_uring_setup(0x2546, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x4000832, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) 21:56:55 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f00000006c0), 0x48) 21:56:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x1c94, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 21:56:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) r2 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r2, 0x400c744d, &(0x7f0000000540)) 21:56:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x0, @broadcast}, 0xd0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='veth1_to_bond\x00'}) 21:56:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:56:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0xfffffffffffffffe, 0x0) 21:56:55 executing program 4: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000004c0)="bb8876c8666d728836412378518a83bd", 0x10}]) 21:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x0) 21:56:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=mixed,nfs']) 21:56:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r1, 0x400c744d, &(0x7f0000000540)) 21:56:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) [ 2926.803628][ T4722] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2926.868967][T13038] FAT-fs (loop5): bogus number of reserved sectors [ 2926.875974][T13038] FAT-fs (loop5): Can't find a valid FAT filesystem 21:56:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x18}}, 0x0) 21:56:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x401020, &(0x7f0000000180)=ANY=[]) 21:56:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r1, 0x400c744d, &(0x7f0000000540)) 21:56:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x88, 0x48a, 0x0, 0x4) 21:56:56 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 2927.193541][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2927.202963][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2927.284971][ T4722] usb 4-1: config 0 descriptor?? [ 2927.340481][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2928.452529][ T4722] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2928.992717][ T4722] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2929.012895][ T4722] usb 4-1: USB disconnect, device number 76 21:56:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) 21:56:58 executing program 2: bpf$MAP_CREATE(0x15, &(0x7f00000006c0), 0x48) 21:56:58 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x541b, 0x0) 21:56:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r1, 0x400c744d, &(0x7f0000000540)) 21:56:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 21:56:58 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 21:56:58 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:56:58 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x29, 0x7, 0x0, 0x0) 21:56:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r1, 0x400c744d, &(0x7f0000000540)) 21:56:58 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=within_size,huge']) 21:56:58 executing program 4: clock_getres(0x0, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x4000832, 0xffffffffffffffff, 0x8000000) [ 2929.927773][ T24] audit: type=1326 audit(1650664618.956:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13064 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fed549 code=0x0 [ 2930.042515][T24929] usb 4-1: new high-speed USB device number 77 using dummy_hcd 21:56:59 executing program 5: bpf$MAP_CREATE(0xa, &(0x7f00000006c0), 0x48) [ 2930.134953][T13073] tmpfs: Bad value for 'huge' [ 2930.422676][T24929] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2930.431948][T24929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.507855][T24929] usb 4-1: config 0 descriptor?? [ 2930.565398][T24929] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2931.682746][T24929] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2931.972632][T24929] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2931.985993][T24929] usb 4-1: USB disconnect, device number 77 21:57:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) 21:57:01 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x6d]}}]}) 21:57:01 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000002080)={0x18, 0x0, r1}, 0x18) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x70a}, 0x0, 0x0, 0x0) 21:57:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, @mcast2, @mcast1, 0x0, 0x1, 0x0, 0xfff}}) r1 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r1, 0x400c744d, &(0x7f0000000540)) 21:57:01 executing program 5: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x700}]) 21:57:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x9122, 0x0, "6e3084ff6ad177579a337f1b10db17170b0ca6"}) [ 2932.496582][T13083] tmpfs: Bad value for 'nr_inodes' 21:57:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 21:57:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 21:57:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:01 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:02 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, 0x0, 0x0) 21:57:02 executing program 4: fchmodat(0xffffffffffffffff, 0x0, 0x170) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) sync() [ 2933.472161][ T4722] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2933.873266][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2933.883174][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2933.904185][ T4722] usb 4-1: config 0 descriptor?? [ 2933.967048][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2935.092519][ T4722] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2935.382679][ T4722] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2935.396454][ T4722] usb 4-1: USB disconnect, device number 78 21:57:04 executing program 0: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 21:57:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) 21:57:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:04 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:04 executing program 2: r0 = io_uring_setup(0x2469, &(0x7f0000000400)={0x0, 0xfeb9}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 21:57:04 executing program 4: clock_getres(0x0, &(0x7f0000000280)) 21:57:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r0, 0x0, 0xf, 0x0, &(0x7f0000000400)) 21:57:05 executing program 2: getrusage(0x0, &(0x7f0000002780)) 21:57:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x0) 21:57:05 executing program 1: r0 = openat$ppp(0xffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) [ 2936.362405][ T4722] usb 4-1: new high-speed USB device number 79 using dummy_hcd 21:57:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={0xec4, 0x0, 0x3, 0x201, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="2eb243d3ccd5ee87110368c6b83d7eba750ab40d232c50d3d2aac08f35cdf13e4752bef2043637a4e4d4228cdf01c3d65ab53650e378b71e755db001d26998ef2b7a66f9709cbe4c9935d305e501d8e3a1cfff2e59c717", @generic="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"]}, 0xec4}}, 0x0) 21:57:05 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0xee, 0x0) [ 2936.671094][T13129] netlink: 3748 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2936.723959][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2936.733820][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2936.777341][ T4722] usb 4-1: config 0 descriptor?? [ 2936.830448][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2937.952537][ T4722] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 2938.242590][ T4722] STV06xx: probe of 4-1:0.0 failed with error -71 [ 2938.256694][ T4722] usb 4-1: USB disconnect, device number 79 21:57:07 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:57:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:07 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @empty}}}}) 21:57:07 executing program 1: r0 = openat$ppp(0xffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3}, 0x48) 21:57:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000640)={0xfffffffffffffffe, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 21:57:07 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x3c28b6053d174e06}, 0x20) 21:57:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), 0x3) 21:57:07 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xb2, &(0x7f00000000c0)=""/178, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0}, 0x10) 21:57:07 executing program 1: r0 = openat$ppp(0xffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:08 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff) syz_io_uring_setup(0x36cf, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2939.242769][ T2637] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2939.604819][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2939.615357][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2939.660613][ T2637] usb 4-1: config 0 descriptor?? [ 2939.715099][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2940.917323][ T2637] usb 4-1: USB disconnect, device number 80 21:57:10 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:57:10 executing program 4: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x4000832, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) 21:57:10 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) 21:57:10 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:10 executing program 0: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x51e3485b}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@ipv4_getroute={0x1c, 0x1a, 0x5, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 21:57:10 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x9a840) 21:57:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:57:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:10 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) [ 2941.942918][ T2637] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2942.330253][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2942.339647][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.379453][ T2637] usb 4-1: config 0 descriptor?? [ 2942.429936][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2943.627295][ T2637] usb 4-1: USB disconnect, device number 81 21:57:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:57:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:13 executing program 5: setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) 21:57:13 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x1600bd74, &(0x7f0000000000), 0x4) 21:57:13 executing program 4: bpf$BPF_BTF_LOAD(0xa, 0x0, 0x0) 21:57:13 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:13 executing program 5: setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @empty, 0x1}, 0x10) 21:57:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) [ 2944.682688][T32212] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2945.044274][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2945.054219][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2945.075868][T32212] usb 4-1: config 0 descriptor?? [ 2945.118939][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2946.286287][T32212] usb 4-1: USB disconnect, device number 82 21:57:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:15 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:15 executing program 5: setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x11, 0x68, &(0x7f0000000000)=0x3, 0x4) 21:57:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x214, 0x0, 0x0, 0x0, 0x200}) 21:57:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:15 executing program 2: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}}, 0x0) 21:57:16 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE(r0, 0x400c744d, &(0x7f0000000540)) 21:57:16 executing program 0: sync() getgroups(0x0, 0x0) getgroups(0x0, 0x0) 21:57:16 executing program 2: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 2947.342842][ T2637] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2947.703543][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2947.712897][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2947.774928][ T2637] usb 4-1: config 0 descriptor?? [ 2947.820002][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2948.986478][ T2637] usb 4-1: USB disconnect, device number 83 21:57:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 21:57:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 21:57:18 executing program 2: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:18 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x400c744d, &(0x7f0000000540)) 21:57:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:18 executing program 0: linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) 21:57:18 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:18 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, 0x0) 21:57:18 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x400c744d, &(0x7f0000000540)) [ 2950.032557][T32212] usb 4-1: new high-speed USB device number 84 using dummy_hcd 21:57:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:19 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xe002, 0x0, 0x6, 0x0, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2950.393150][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2950.402523][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.487314][T32212] usb 4-1: config 0 descriptor?? [ 2950.540191][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2951.713539][T32212] usb 4-1: USB disconnect, device number 84 21:57:21 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:21 executing program 0: r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:21 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:21 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x400c744d, &(0x7f0000000540)) 21:57:21 executing program 4: bpf$BPF_BTF_LOAD(0x1a, 0x0, 0x0) 21:57:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:21 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000000)=0x700, 0x4) 21:57:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100000101010200000000000000000000000806001240000200000800154000000003080008"], 0x10c}}, 0x0) 21:57:21 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, 0x0) [ 2952.613457][T13280] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2953.155385][T32212] usb 4-1: new high-speed USB device number 85 using dummy_hcd 21:57:22 executing program 0: bpf$MAP_CREATE(0xe, &(0x7f00000006c0), 0x48) [ 2953.547084][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2953.557719][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.570125][T32212] usb 4-1: config 0 descriptor?? [ 2953.619956][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2954.787074][T32212] usb 4-1: USB disconnect, device number 85 21:57:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 21:57:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 21:57:24 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, 0x0) 21:57:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14}, 0x49acdc8dbe473a60}}, 0x0) 21:57:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 21:57:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 21:57:24 executing program 4: syz_io_uring_setup(0x1537, &(0x7f0000000480)={0x0, 0x4945, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 21:57:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:24 executing program 1: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGIDLE(r0, 0x400c744d, 0x0) 21:57:24 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x60}, './file0\x00'}) [ 2955.852933][T32212] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2956.213335][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2956.222995][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2956.259287][T32212] usb 4-1: config 0 descriptor?? [ 2956.310041][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2957.476923][T32212] usb 4-1: USB disconnect, device number 86 21:57:27 executing program 4: syz_open_dev$vcsu(&(0x7f0000000340), 0xffffffffffffffff, 0x18442) 21:57:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x0) 21:57:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:27 executing program 1: io_setup(0x8, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:57:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 21:57:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:57:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp-reno\x00', 0xb) 21:57:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:27 executing program 1: rt_sigaction(0x16, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000005c0)) 21:57:27 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000f80)={[{@fat=@umask}]}) 21:57:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:57:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 2958.592456][ T2637] usb 4-1: new high-speed USB device number 87 using dummy_hcd 21:57:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0xfffffffffffffffe, 0x0) 21:57:27 executing program 4: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b5", 0x1, 0xffffffffffffffff) 21:57:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) [ 2958.952656][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2958.964574][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.063653][ T2637] usb 4-1: config 0 descriptor?? [ 2959.113118][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2960.256970][ T2637] usb 4-1: USB disconnect, device number 87 21:57:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:29 executing program 1: io_setup(0x8, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) 21:57:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:57:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x11, 0x64, &(0x7f0000000040)=0x1000002, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x40, 0x80, 0x1ff, 0x4, {{0x23, 0x4, 0x3, 0x7, 0x8c, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x71, 0x3, [{0x6, 0x7, "9556d761b9"}, {0x6, 0xf, "510b3f8e1e401bcfc20a939904"}, {0x5, 0x9, "ae05a7684fb647"}, {0x2, 0x9, "6725bef1a6814a"}, {0x6, 0x6, "5289ac8c"}, {0x0, 0xa, "ece7aa56498cb933"}, {0x6, 0x10, "0f3e3ebe8b3a7daa155433d33eb2"}, {0x6, 0xc, "28ed055c1a30f807f1e8"}, {0x2, 0x11, "99bcb95c87958625faa0ab0e55fe48"}, {0x0, 0x6, "ddeeb192"}]}, @end, @end, @ra={0x94, 0x4}, @end]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@remote, @empty, r2}, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000680)={'icmp6\x00'}, &(0x7f00000006c0)=0x1e) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_macvtap\x00', 0x1, 0x1, 0x8}) 21:57:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 21:57:30 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:57:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80}, 0xe) sendto$inet6(r0, &(0x7f0000000040)="df", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:57:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 2961.315162][ T4722] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2961.710139][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2961.719471][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.769763][ T4722] usb 4-1: config 0 descriptor?? [ 2961.838349][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2963.003269][ T4722] usb 4-1: USB disconnect, device number 88 21:57:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 21:57:32 executing program 4: bpf$MAP_CREATE(0x11, &(0x7f00000006c0), 0x48) 21:57:32 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) 21:57:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{}, {@session}, {@map_normal}]}) 21:57:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) shmctl$IPC_RMID(0x0, 0x0) 21:57:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 21:57:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), 0x4) 21:57:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 2964.062435][ T4722] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2964.219435][T13400] ISOFS: Unable to identify CD-ROM format. [ 2964.447390][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2964.457033][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.538217][ T4722] usb 4-1: config 0 descriptor?? [ 2964.591910][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2965.763018][ T4722] usb 4-1: USB disconnect, device number 89 21:57:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:35 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x51e3485b}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@ipv4_getroute={0x1c, 0x1a, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 21:57:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) shmctl$IPC_RMID(0x0, 0x0) 21:57:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:35 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc0189436, 0x0) 21:57:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) shmctl$IPC_RMID(0x0, 0x0) 21:57:35 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f00000012c0)={[{@session={'session', 0x3d, 0x5a}}, {@overriderock}, {@map_off}]}) 21:57:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 21:57:35 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x40086602, 0x0) 21:57:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) [ 2966.762416][ T4722] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2967.073782][T13424] ISOFS: Unable to identify CD-ROM format. [ 2967.123334][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2967.132888][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.204784][ T4722] usb 4-1: config 0 descriptor?? [ 2967.252718][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2968.433496][ T4722] usb 4-1: USB disconnect, device number 90 21:57:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:37 executing program 0: r0 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 21:57:37 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:57:37 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 21:57:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 21:57:38 executing program 0: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:38 executing program 4: epoll_create1(0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 21:57:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x6, 0x4) 21:57:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) [ 2969.552414][ T4722] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2969.914059][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2969.924141][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2969.941754][ T4722] usb 4-1: config 0 descriptor?? [ 2969.989791][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2971.163091][ T4722] usb 4-1: USB disconnect, device number 91 21:57:40 executing program 1: socketpair(0x0, 0x80f, 0x0, &(0x7f0000000140)) 21:57:40 executing program 0: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x8, 0x6, 0x205, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:57:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f0000001380)=[{0x0}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) 21:57:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000006c0)) 21:57:40 executing program 0: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:57:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="be", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="f9", 0x1, 0x40488c0, 0x0, 0x0) close(r0) 21:57:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:41 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000200)=""/4096, 0x26, 0x1000, 0xffffffff}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={r0, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f00000000c0)=""/112, 0x70}}, 0x10) 21:57:41 executing program 0: shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) 21:57:41 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x1265, &(0x7f0000000080)) [ 2972.182774][T32212] usb 4-1: new high-speed USB device number 92 using dummy_hcd 21:57:41 executing program 1: getresuid(&(0x7f00000000c0), 0x0, 0x0) 21:57:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) [ 2972.543280][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2972.552725][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2972.591263][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 2972.598206][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 2972.643553][T32212] usb 4-1: config 0 descriptor?? [ 2972.691152][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2973.865174][T32212] usb 4-1: USB disconnect, device number 92 21:57:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:43 executing program 0: shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) 21:57:43 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x5452, 0x0) 21:57:43 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) 21:57:43 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f00000006c0), 0x48) 21:57:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:43 executing program 1: io_submit(0x0, 0x1, &(0x7f0000002740)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="779211006205ecda7096418694591e2609990403040f96394858ad800f8b2b811369301e96552cd0145d69457b7ad1d26671175f074813fae6a1a2628c1f0a163f4976af20d91cd2aa29bf2c87e9d985d981dd87935cfbf169", 0x59}]) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x68) 21:57:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x11, 0x0, &(0x7f0000000000), 0x4) 21:57:43 executing program 0: shmget(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) 21:57:43 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000004c0)="bb8876c8666d72", 0x7}]) 21:57:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) [ 2974.902670][ T2637] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2975.265358][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2975.274781][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2975.289982][ T2637] usb 4-1: config 0 descriptor?? [ 2975.343376][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2976.513950][ T2637] usb 4-1: USB disconnect, device number 93 21:57:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x166c, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 21:57:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x11) 21:57:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0) 21:57:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:46 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x112000, 0x1000}, 0x20) 21:57:46 executing program 1: epoll_create1(0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f00000000c0), 0x0) 21:57:46 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/36) 21:57:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:46 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file1/file0\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:57:46 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc0189436, &(0x7f0000000080)={{0x1, 0x1, 0x60}, './file0\x00'}) 21:57:46 executing program 1: getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 2977.577625][ T2637] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2977.962766][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2977.972255][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2977.994360][ T2637] usb 4-1: config 0 descriptor?? [ 2978.050279][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2979.226723][ T2637] usb 4-1: USB disconnect, device number 94 21:57:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x3c, {0x2, 0x0, @empty}, 'erspan0\x00'}) 21:57:48 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x4020940d, 0x0) 21:57:48 executing program 2: syz_io_uring_setup(0x2546, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x4000832, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_setup(0x4e6, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 21:57:48 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) 21:57:48 executing program 4: io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r0, 0x2017, &(0x7f0000002740)) 21:57:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x21) 21:57:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000014c0), &(0x7f0000001540)=0x8) 21:57:49 executing program 0: r0 = io_uring_setup(0x57a7, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x13, r0, 0x8000000) 21:57:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@tclass={{0x14, 0x29, 0x43, 0x101}}], 0x18}, 0x0) 21:57:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, 0x0, &(0x7f0000001540)) [ 2980.312696][T32212] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2980.672660][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2980.682508][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.724600][T32212] usb 4-1: config 0 descriptor?? [ 2980.775379][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2981.946298][T32212] usb 4-1: USB disconnect, device number 95 21:57:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) 21:57:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@ipv4, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x2, 0xd19b, 0x5f2, 0x0, 0xffffffffffffffff, 0x5d4f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) 21:57:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000080)=@hci, 0x80) 21:57:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, 0x0, &(0x7f0000001540)) 21:57:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000000c0)="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", 0x5ac}, {0x0}, {&(0x7f00000011c0)='Z', 0x1}], 0x3}, 0x0) 21:57:51 executing program 0: lchown(&(0x7f0000031880)='./file0\x00', 0xffffffffffffffff, 0x0) 21:57:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, 0x0, &(0x7f0000001540)) 21:57:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 21:57:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x2, 0x3, 0x903, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) 21:57:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}, 0x0) 21:57:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), 0x0) [ 2983.012523][ T2637] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2983.402757][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2983.412240][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2983.435760][ T2637] usb 4-1: config 0 descriptor?? [ 2983.492710][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2984.626372][ T2637] usb 4-1: USB disconnect, device number 96 21:57:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5451, 0x0) 21:57:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 21:57:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)=""/156, &(0x7f0000000100)=0x9c) 21:57:54 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), 0x0) 21:57:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0x10, 0x0}, 0x20008003) 21:57:54 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x18, &(0x7f00000014c0), 0x0) 21:57:54 executing program 4: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @address_reply}}}}, 0x0) 21:57:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@empty}, 0x14) 21:57:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000000100)=@newchain={0xec4, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {0x1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe80, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xe}}, @TCA_MATCHALL_ACT={0x890, 0x2, [@m_csum={0x8c, 0x19, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe49c, 0x7, 0x0, 0x2}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000000, 0x80, 0x4, 0x3, 0x100}, 0x1d}}]}, {0x26, 0x6, "1101e63c2daba2f2cce56951d374e03a78550b55f52eaf94a3276c69145e90714d1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x4}}}}, @m_ctinfo={0xcc, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffff, 0xffffffff, 0x2, 0x10001}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9bd9}]}, {0x80, 0x6, "6c48813c6697b842bd80b0dec809a88784f469b5f46b2c346d5d2642f1d53b339bf55eb4c43035fb5abe5532f67b16f9d1cb267c5bc3999588443f73b524d419c1bed828585387b5e277e14804bdde4e8a95644eaaddd1a1344f4eaaac855b83f44349e2f6059822ff909c1d3f0d879897f91dffe207140dfb533589"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x8c, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9c5f, 0x101, 0x8, 0x4, 0x100}}]}, {0x48, 0x6, "936648baa672beac8cdf57f331052a6d875dc9018efbfb20993d0ea3f59e940fe72a4416cd7e3ca5252cb92069bc691cb6a674a11c0387e50b10a5cf533b907cdd4f9bc9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x40, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '+\x00'}]}, {0x9, 0x6, "b0f6172671"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x508, 0x0, 0x0, 0x0, {{0xb}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x26afc695000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80, 0xc3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x3, 0x8, 0x7fffffff, 0x98, 0x0, 0x7fff, 0x9, 0x400, 0x9, 0x6, 0x13ae5722, 0xffff, 0x2, 0x0, 0x8, 0x1, 0x101, 0x1000, 0x2, 0x7, 0x8000, 0x2, 0xc5, 0x3ff, 0x8, 0x1, 0x4, 0x20, 0x410, 0x80000001, 0x1, 0x0, 0x7d052df6, 0x4, 0x810, 0x7, 0x200, 0x5, 0x8, 0xfffff709, 0x5601, 0xffffffff, 0x8, 0x81, 0x1000, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xdf8, 0x101, 0xfb91, 0x8000, 0x1, 0x1, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x4, 0x7, 0x5, 0xffffffff, 0x1, 0x4, 0x8, 0x800, 0x9, 0x2, 0x7, 0x10000, 0xfffffffe, 0x4, 0x1c2, 0x2, 0x8, 0x7, 0x5, 0x8772, 0x230, 0x800, 0x5, 0x1, 0x5, 0x62dbd890, 0x0, 0xfffffffd, 0x5, 0x994, 0x4, 0xffffffff, 0x9, 0x9, 0x7, 0x3, 0x9, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x7ff, 0x5, 0x1, 0x9, 0x2, 0x4, 0x4, 0x556, 0x401, 0x7d9c, 0x0, 0x9, 0x2, 0x1, 0x63e, 0x1, 0xfffffffa, 0x400, 0x2, 0x5, 0x0, 0x80000001, 0x2, 0x0, 0xffffffff, 0xffff929d, 0xfffffbff, 0x8, 0x6, 0x8000, 0x101, 0x4, 0x68f, 0x2, 0x5, 0x95e, 0x4, 0x3, 0x5, 0xef1, 0xfff, 0x8000, 0x7fffffff, 0x1, 0x1, 0x0, 0xc1a, 0x80000001, 0x400, 0x1, 0xb840, 0x1, 0x81, 0x4, 0x7, 0x4, 0x7, 0x6, 0x7fffffff, 0x39726ff3, 0x0, 0x6, 0x7f, 0x9, 0x5, 0x800, 0x1000, 0x0, 0x20, 0xfffffffa, 0x6, 0x400, 0x6, 0x5a0, 0x2, 0xff, 0x391f2fde, 0xe00, 0xb3d4, 0x9, 0x1, 0x400, 0x7fff, 0xffffffff, 0x80000000, 0xfeaf, 0x0, 0x74, 0x8, 0x7, 0x8, 0x7, 0xfe3, 0x4, 0x9, 0x7, 0xf4, 0x4, 0x1f, 0x1f, 0x9, 0x6, 0x11d4, 0x0, 0x20, 0x1, 0x2, 0x4, 0xffffff9c, 0x0, 0x200, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}]]}, {0x7a, 0x6, "d1227176520370f665aaca58dacbf404e120be14c6565b054588bbe496f49b0718bc166622d27bf379a6c37ff77fa2e5b15e161f0b83b8c5196a2893d2bfb1301e6446f9944d1fbf942ec42efa382accdefaac305727000020b8b1d902899791ad42c4c34186af53e4d58106fc2bff810144ebaa32bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x6c, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x39, 0x6, "28134701b03aaefdb6bdfb5cb3e2dee04c70a41c44d9be4727f9d3ea5866d84511a722b7dcdaa5ca498eae163c9ec4e71726e087e7"}, {0xc}, {0xc}}}, @m_skbedit={0xf4, 0x19, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x10}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x1, 0x1, 0x167, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x92}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x10000, 0x1, 0x1, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x94, 0x0, 0x8, 0x8, 0x7}}]}, {0x5d, 0x6, "206d69c73d061c6b4f7a62c7e573a172417b55ce7ea91fe0f5660cd5c507e65ef42fff9f106b582808f3506543cc333e86305c17ed3ce7791ffd5a49c2ab38ba39e5bec03f1647881c6bb1acb071c1e0fa708e22e956f7d84d"}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x5c4, 0x2, [@m_skbedit={0x134, 0x0, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xe5, 0x6, "7c590f8103992403a1f2b4099b6c61a0efa5aa1644a0e593ad463b86f885dd67f0c878663b0ecb8b51e339f1fc032c6d08a7c225106ee90c50ee444f1d3703aa81e868ff2568a13524d8e52855f470d685944a3a47c1e93674924f7a827f964da3fbd90c0210426d6066a4b9f1aa470ee389f4b000e4fb168ae45d8507381eef46f1dfd91d8821b9c4a01f20240525da3dbc99d67a8c3dab3a03556cc90d325dfafdab3c69ba3b858424514eea44e2c0a8c69352ea8469e82726759d3ea417c424083c9b1b0266c384b360e13e5ad97d7fbe495223412e599911ab409047f375de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x58, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x25, 0x6, "66a214e92a611fe746a614f8e3345918ab7f2e61e6cdcc9081faab25611380a9a8"}, {0xc}, {0xc}}}, @m_police={0x434, 0xb, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x800, 0x7fff, 0x1, 0x0, 0x4, 0xf5, 0x9, 0x1, 0x3, 0x5, 0x8ea, 0x7, 0x0, 0xfffffffc, 0x4, 0x3, 0xffffffff, 0x6, 0x2400, 0xfff, 0x4, 0xa67, 0x0, 0x0, 0x5213908, 0x2000000, 0x0, 0x8, 0x9eae, 0x3, 0xb61e, 0x61d, 0x138, 0x0, 0x4, 0xd93, 0xffff, 0xc1e4, 0x4, 0x5, 0xe77, 0x0, 0x3ff, 0x0, 0xffffffff, 0x0, 0x100, 0x1, 0x3ff, 0x17168cca, 0x26, 0x2, 0x0, 0x7, 0x5, 0x9, 0x3, 0x2, 0x69, 0x4, 0x5, 0x20, 0x0, 0x9, 0x6, 0x4e, 0x7fffffff, 0xffff, 0xfffffffb, 0x81, 0x6, 0x3, 0x10000, 0xb17a, 0x40, 0x1, 0x1, 0x2, 0x7, 0x6, 0x80, 0x100, 0x0, 0x4, 0xda2, 0x101, 0x4, 0x1, 0x10001, 0x31f78000, 0xfff, 0x1, 0x4, 0x5, 0x10001, 0x16f, 0xffff7fff, 0x100, 0x9, 0x1ff, 0x5, 0x7, 0x31, 0x9, 0x456, 0x3f, 0x10001, 0x7fffffff, 0x8, 0x6, 0xfffff1c6, 0x6, 0xd7c, 0x8, 0x57c, 0x0, 0x9, 0x6, 0x4, 0x0, 0x8, 0x1, 0x7, 0xca1b, 0xfffffffa, 0x8, 0x0, 0x8, 0xc2, 0x1000, 0x9, 0x8001, 0x1f, 0xf933, 0x80000000, 0x40, 0x1, 0x1, 0x200, 0xffff9654, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa5dd4d, 0x6, 0x5, 0xfff, 0x400, 0x0, 0xff, 0x6, 0x8, 0x2, 0x80000000, 0x4, 0xac2, 0x3, 0x8, 0x0, 0x24, 0x1, 0x1ff, 0x3, 0x380, 0x3, 0x6, 0x564, 0x7, 0x1, 0x7, 0x80000001, 0x8, 0x10000, 0x6, 0x2, 0x0, 0xd2de, 0x181, 0x0, 0x2, 0x3, 0x7f, 0x4, 0x1f, 0xffff, 0x75e, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8001, 0xffffff8c, 0x101, 0x2238d20e, 0x0, 0x400, 0x4000000]}], []]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 21:57:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local}, 0x14) 21:57:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0}, 0x0) [ 2985.722686][ T4722] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2986.093363][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 2986.103374][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2986.163111][ T4722] usb 4-1: config 0 descriptor?? [ 2986.220680][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 2987.388546][ T4722] usb 4-1: USB disconnect, device number 97 21:57:56 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21:57:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0xd, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x3c}}, 0x0) 21:57:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local}, 0x14) 21:57:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2a, 0x81, 0x7, 0xfff, 0x34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7, 0x8000, 0x7, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x4, 0x1, 0x20, 0x7fff, 0x40, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x40, 0xbb95, 0x3ff}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000002740)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x29, 0xd2, 0x7, 0x400, 0x24, @mcast2, @loopback, 0x10, 0x80, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x0, 0x7, 0x21, 0x57b85fe0, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}, @private0, 0x10, 0x8, 0x680, 0x101}}) 21:57:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e20}, 0x10, 0x0}, 0x20008014) 21:57:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 21:57:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 21:57:57 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc) 21:57:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b65) 21:57:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local}, 0x14) 21:57:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 21:57:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0012"], 0xa0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000045) 21:57:57 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21:57:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b65) 21:57:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@loopback}, 0x14) 21:57:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local}, 0x14) 21:57:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 21:57:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b65) 21:57:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dontfrag={{0x14, 0x29, 0x3e, 0xc000000}}], 0x18}, 0x0) 21:57:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 21:57:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0xa8) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000001440)) 21:57:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b65) 21:57:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0xe0000000}, 0x10, 0x0}, 0x0) 21:57:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x36, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 21:57:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 21:57:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000002c0)={0x3, 0x5, 0x93, &(0x7f0000000200)=""/147}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000005c0)="bebfd11045a84a16625f20da5e3af5b6c68c60aabd24152f45921b74d168dc741b5d094b0eab10f47c24097be98e8a5e362b36fc1b5123f969a9b0d2acce4ffbfcaecda5a23721051205b0179964867e6617c5a998f19bfe6e91d17c2e4ceef247ecccc1687cb9fc158c796bb86e9f9629e2ed3cd671d38488fc9fdbc75cad78961b342936b5ec9ff1a10182ef6d910000000000000000000000009e9cb87db2a74334faa817f4e52e1dbf4edc427ac2274887a75fbae9985ec3173549d6af6a38ca9afa70afe2cdfe29a6f490853f4b8afef9e9d45df549cc74107197799f682ab0d5c4f017c9ffb37e667f16fb36827d", 0x202000, r4}, 0x38) r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="65727370616e300000000000000000006bcd23593df5ec8e714e3e7690777f77e4687dcd772c60691cec3f7bc3a117e1e0a31608cc4dc502050bdb75dd26d77dba0755b0468fb02262e2c506b7b6f702155e746c6b73ae80e39f39", @ANYRES32=r6, @ANYBLOB="80000010fffffeff000000084c0600700065000094299078e00000017f00000100441c98599fc440aa00000008e0000002000000ffac1414bb00000e17443c1563e00000020000167eac1401ac1e000100000006ac3ba916a2201e00010000007f0a010102ffffff817f000001fffffffa0100"/124]}) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xee8, 0x3, 0x7fffffff, 0x4, r4, 0x3, '\x00', r6, r7, 0x2, 0x1, 0x4, 0xe}, 0x48) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000080)={0x80000009}) sendmmsg(r0, &(0x7f0000000300), 0x0, 0x22004001) 21:57:58 executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21:57:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast1, 0x0, 0x701}}) 21:57:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 21:57:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 21:57:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}) 21:57:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, 0x0) 21:57:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x64) 21:57:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e002e0095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000000001090400000000141a000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100ac14140008000200ac1e00010c0002800500010000000000080007400000000004000f"], 0x68}}, 0x0) 21:57:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}}, 0x0) 21:57:59 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:57:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0xc020660b, 0x0) 21:57:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0189436, 0x0) 21:57:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) 21:57:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x2, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:57:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1600bd74, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 21:57:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2cbfb35206dffe1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 21:58:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000004) 21:58:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 21:58:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@hoplimit={{0x14, 0x29, 0x34, 0x9508}}], 0x18}, 0x0) 21:58:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 21:58:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:00 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, r2}) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 21:58:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="391ffe1cb938"}, 0x14) 21:58:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@tclass={{0x14}}], 0x18}, 0x0) 21:58:00 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007", 0x11) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:58:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 21:58:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001340)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000000c0)="d572d55b0e6fd517ef54ce1a19cc40fc9e8d7e302a491c4a6d5d45509e0fdab257ee60bcfd2f0972d6c9ed32a96ccb7dedf258f704055c1e5ea1efe29c68da441c0a4cb3cbc365f9945e709766b4636d6e6f5e4335d3996716257303a86498847219b89024583a5b5c3cd3f2cf90447b554307f76e06e067eed7ad2c4af6cc409500efc4a0be9ae2481e3458c392acdeb96cced47fe354dfea1d007b4f315750b92acb8526d77c68fb114b1bd4d792c95e0559ba9be5c6b9cfb4847b227c71d0adccf473994fc6ac9b80c7983dbf67d01e90b739edb3ae5b50aa4cb83ede090da0c121fdc500cb8af1fbeb16da42fd32ab00d985e931e38429d79f9b096b511edf1f527ae194c27693b4886bc79e2b2d661bd3d5e07e6b173c42b62609b44ab097ca7dda502a09953a34614a18b6a97aba81a4543d65f97091c1a70d5addf7ffe5182f36abbfb07c6f56ddfb0e927bbf34001eac5ba0b1edbc360463b6f293dc902d7ca42c7345a3228008097590a1bc3d8094e2423266668a26473d19cb62e2ec93e7b612208e0a074ebc46f5e24618d1d2c48183efefb42a0d8ce070cde6dd01a750985ee0524578751b94e7239ac9305e03c5e5b10ba7f4f55fe4a3a147cc6439db3321790c530d3252f5f63f52106484de4af868866680e1df24d7601e7fdc594b84dce5dc1a8a3740affefbb6a0a6db2622543309a41199ab688cad2cf7751d386834f0d677bf30c3e9f4add98a9d623a313bd9f17e122073acd09e9d8529f54c9722e8aadc49745820c4bfd87a26dafe665b010bcf086827649745816e9f8b061337c334464f7184f63425119d804a3afa1cd8319128b8fc1a52e95e5032095c2d1c31b8a0428a511e30f6ef31690e5ea6ee49beb20168d0a6194f42f8ab9e3d92124ba53d2f7758f0aae5484fd5458becbb6e3eecabf63059afcf2663231e869045e8e884139ba5f295d33a554c5feb866bf747686beb78c3f880a80de3e9ef281d200d68e4c8e72e74e71c9d0f6c31493902e0fa2bbb5f9debc37fe71153497f08934ace84b53aa2b6843ed7ebab2dca6830c5c7378bb390e1554c6fcb72604df9d19b05b65cb47f3f1f768bfcced7d34dfbaaa52c44abe666657d875791d5d48002868cffd9b9b16b386ebb15e12e394ad144fa87962c97fececd783c47d8c367278bfccbf47f01a795782c6e7911ef451a475e1eee0c8e618644f0bcd3c51b8fdf4fc445b124c4b97e16c56b05df3cac8749f5e3f8b05ad37aa786fce7e9aed0f8dff9e763b3e85dc3c9fd7a50f37bf70bbc36ffd784b3cea2e42e68047b36ab6ceaad4389f23feb2a8f5a6341cae231f6d6a5ba17ff5be528b0ca82c90418fab19a6ae873f4ed54993ce68d77cc315a8486978f2b0601fad7ca0830f722436ac80ce749e701547f32dc50bad6d4cc6ff84874dc1095aa6f9c62407f3b438baaba763e3d531f9ab37c1f7dcecf3745fe057990fa1641572187ebdbc5d802f94c5a4fb8d87f39a225b875e10c36dcce3c0668066edefd91118ab74b1560650a1f27ebce32c8452a92b56e745463692df671cc9c96765c0baed48ced4aa7e146e01c92068ee1d8003b3b10e153f60401f4805d61e5b85df562570340bab79c0224566493693c18751aacf5cd61fa4e45b0dbc8e8610ec84b2edf31698881642a3e2c510ca783cdb9d8e03f6579a2ff980fddfd136640a445294a7ac163bf6fe613ea9718300c362f52d4591ad9e06ff262b9649cd3b91a0e3d9792e784cb0ade7d00c1b60ee81cb0e743269f4ebce4deb2a9b5b8de7a40b123a595ff6f416619b5577d5b1081032b7daaf1af9f6ac2af82f223e129b516171a5c8a0266bdf755660b6d5d58e244b63f3e24fb47f7223cfb2d557a73381c2566a4a0863455b5e46186d5edbba880b3165062a2f7422bce3be5ef235ae5582780de243ae6b4b063ff917782f94af69b2a255f88bc227a2f418ac2be4b3ac83e66b9c2687228cb85037b0d5d3a9f69c82dd0131821e8f1e7d36851ec2995d41743e725311539bdb66c3bd893dce10f6fe0a60b9fe29970a944858a70fab4112e3f1cd1fc393ebd8e775ea242c48a045dc33f0fe6c743fb1b6e5ddf7a10e16609a9f95b5601c38f40eb41b24bff87a177d107940d37774601ea3a36c08e939beb53cc728ea3c9f28f4a9c57f942d1ba2cdbb3fff8413a2398108bfd38730fdde8532e747478a382bc601d5d0c541ea36ab15642187a32ef52d9eda3fc885ee43f8d094755f3693b8c0508159e61758c9c5743f55b5c092225dda9fbb1fe5153f0507891e1de3bcdd689b1232c76797f0ca49f5bf3091efaaf68782172983aa2172316002561bf1cc78990429b3e84ddedf6dc9ace9e4ef6078c6b817b3b38307b53e41c287987f3110fbf3783b46fc067ccb25c79957f67b32738d76f0938ecbe436c935646c4df51c6d68c1951d2b44d6a50fe24f23d3fb20ed5c087fb217f66b5c780c99e63452072d3f048b7295680b59fc7bd5050083f1cb32a1459c7d2d05602701d8e9ba2842e3c46de445b4c74cb9331eb30a362016d48b0bd39e616e376557463b8b1203782a7a42d44a93e2fbdad484e55e796e475c4b931c56f2ce101443ec7e384116d529ba3b2e4a40fcc82b3a89511d748ed36bbc1f419a226b041ec42649cc323d77d5a050c33017cd09a4227304ba0ea50c9ac934de28d909a682ea2c2b1017360bad6d57a55ddf0e1554812471c83fc17f5de0bb6d35aa944919663cf245433588e62593d24bcec46ccb587136aa5552ef6fee292690c974045f1ec432d45e266459fbbd1b900d417e3a3f54f79c1f321db8895d7541a101b062cb8714cbec3422d1c32fb2765eaad37c8e0a1b28f4b1889c3bf1ade8b409a68dad1dcf70d06747bf54606f56836b27662a253b7fe45e709b9ac4093568a8c909c8f6b2aee32d9600f8a74473e44da23863c3ba6b4cc8f946121b40eaab2e82918034a11e4288126280fb8b867e6fde89651753f2986fba7895c3245808f6298f4424c5e0467928a8db403c5d3ce026341e5849ebf5b33637a92781b10e9d0ff0fb69fd4ce5d4b6d27b8e86b85f842f1aa461cf5a0534c4d5ed35ed8391c7deb9c9d05b0581001200b7d6d2b60f6018786f1c0d9467910028a13578e77ac3cbf5d97654e387cdee01a2b590be9183be0a1e5f66127f54bde6611530b5c17f72ee3c8560e95897cb21e24d35c320706f7a1fb56c043c550aeaf976d3357e03d9153f05a28a5a15ad8c14773899ff20d4cc454665b5ec12ead5264503ee127791f09b8e81797500bbe96d3fe1348a3f4dc8fc182a969a040ae20978595c7a4f9a1a34fda9febd43e6285aad9de652b6888f0d6539a19244435503c68808a373c0059b4df11e1adb537ed68a08d92f45bf5cae073efc105d4db3a4aeee9dcb74558d8a59d35bff6deda07a8d6215a3fa67d475d0b876bb3d30f27587e579866fa862f7229a1070ea6e8f110b803e7069f319331afdcf94546bce1ff970f511038edcaeb8d83fc1ef66b079647580b48467ee68ee3063888468b73670de69c838069836496f7d488af22b4e06631fb3e6d3f402ae5da0aad7e5bbdd4f72e0576999d5a701fabf39b53b208ecbb2a1f9eadf219665a007ed49858bb53b07f20df38ff390781ac3ec406cd68241e5113f90a1c145932aa0ab92c94536d27182463a92194000e406cacce5de11bbeea7f74dcc18244026aea045e02219f89641eff934359cdcd61a18e9f397c5731d1b63dae9fa2ac6bde56c9b76ee42efcf7181e85f885350a61219a66e365ae922c2eb6dacb94134b52024e8a3ffcbcb680d44368bf80926ef0afecd9fb1fe011e63d964f90d7a4b1522703b53044235538924a9e9373df90b3448bcfd471e5c56ade54747ad24e894cdf2f8170fd7fb15742db4755358662b16483f66d445bd393dede742bb0a05a374b21d60ef512b9a04d79290add45db3deb0ccd89d92b00582506fe208f1a4a6624049dddc65f7b33d65c5e0b8a7fb5937c5db5b283145e9a975bc0dae42f69a9a18aa36ddfbb2f7a680a27ede56b67c733876b4ab927c95a1f2b5a4a1debc05105bd5b7df44e4f16cbbd0630b2dc6da80b45dd1f4a942828562c4c5897c0292b22cf3bf29dcc9613f8305cb7578bc4022e62874d41e242449a0dfa14b907de73016249867aeb4459d128587d1b6eb3372641b110ead59a1bab3dcb5995d42d8815f4222a3888609c1e7a96a844b7b69200dc3ba399e5b1e82dee406973e7cf52b91867091e5fcfa12123ac4c1f70844943be098919d3a10c97e9588fb3400ecd6438931ec6c3b26bfad865a39dd9416145f109c81eae15a1a6ecaabc3c8d22d48332c9af89713a51685ef4c80b1c9e46841b6fa5740db8867b1dda45996d86ee1bc2e8281a91fafb1d18c5443e7b263d3151ac574e45ed2bb8d64a6818cb467274b2e3291fb156cfd1b8c8b5bb3d96b3ed596f6369b0796fb579b01f970ddceb7ca49d9873fa1449088f2c8560186c67f0289da316bb1da90c034d71108a35cfbb5af7dbbb69fa66a7432f8f14c8484b20d0bf2ba239d5c4cdade9dbc21dd99d3c8543d2b07339b91b3f8025266335ce16b42d9e81695917d9cc193955b0950d5bb84b1fd195dcca07b2e6c59e7d48f1ec1ffcccb8b08bfd58fcee40606bc28698cefe0646cf54764f00a9d9212231beba3e34b2fed7a9f00149693d484e2c6964fb224dec73e7a8eb45801e9ccd41666052063a954edc19a5ddd8c61795697e75068c6d252564fb62c3730fcbfc1eea7111302c84ed24d8da924375e498b3725f085fa26a07e63aa4e2e028aef308317e423bbd541f097bd6cfd857d005a3bbb88b3736c3e4e34fcb13843a9f4ca05948325621acd295aba5c86910b5c9c20df293957c5f463586b434f032dc7851695727a5b00284c31991028e4c7ad41a4e087c4db47af14fa181d4dd9cb72fc5e5e21aa48d67d89b90e5679817e5508e579d52a7ca6b177c5247368471c41ab3c46fe3068c0113d976d701c6a0cd7df14a5436a677b7fc0a5c25b17909af13a3e9c749dee8dbe0eb00b31b593fad4fab46b2dd686c3a5f74c86a98f2adf5ffe12d469f9ebc339d5c14962caef3056c1ffa7fc75b259a64f0fe3d5229f7379bdeac3c7f90a540c632fbe5bb522650daca83220530f6ef37591eb13f36e14f26faf86368d07d507fa88d274f9e1cb6d0c78b6447f2c42e8f7172daca98e4746e4c28d62830ab437b6b5f6ca6581ea7253abb1c315b71b3a7cdb2c46a0da88cdc07f45e9eebe3c24c71ee5dff9c08fd22eac51b3a51c561595494d259b84a89118807a778dfb764f360041a31f475a9941b428980b218887c22a41f11edf83051b77f7f3bf5be8689c0895594a795fbf9e96e1f67bec1f5fb7981ba0691da6815c8121a146149b08dc0d80a0f8c3c2788b1df6e0a1c8e5c159a0640344080a2e31dc1fae07be9d594764e9483d1485e8a0c3de591be70510f6863c67df24c714e5e0b1a7b9314d6256248fa2b928962f921777a3a85d675953d82fb8e947449819985c157b82ece99285b681a7d7f307c8f5ef386b6bcf1372894d2a86e3be9f73728de6b8287130aa8174fb291af7adeedc22e629555d1a877cd22dfb5241bc610accd4c5de05ed780a74507e0f1413f4e67fcbe4055eba88716d03d284afc0654690856f8a5e46bd42a64abb1884f2ccc4192dfaea29b48422c179f6b93c149ee6474e0a25fea1d28c76d8822a2c2f35ea91315b75404bc0f75bd46c7830d4c63", 0x1000}, {&(0x7f00000010c0)="18c146b9150b8449530caf8363d18e67c8db3aff2f42ace8ab446bed6e93f913988467f8a5806ed84c25d0313abb14a2abe60152e7be8419f49562114f7c20eb1ec0832b853f658c1ebfca6398b242c0f24b10e08288f97435419c05e2e8c0592261b76096f09d55cd42c3f4c74c622ac3f38e426192f35ac8727e11a9d5fd9242e95a4d4bbfc0819c74a809f1b6ef3a901cec0308e56978a9c84b588a2941bf08d61c04a45c88740606fee54933b1fd424c17b8f631e77be930173b38b2cfcd3b90d59336", 0xc5}, {&(0x7f00000011c0)="5ade1bc392b8b1fa1b263555ddaff5fc9025f79b55a369c38bf11e07a8afd26fbd13b8fc040a95cf515506b7", 0x2c}], 0x3}, 0x0) 21:58:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000000100)=@newchain={0xec4, 0x64, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0xe90, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_ACT={0x7d4, 0x2, [@m_csum={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0xcc, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffff, 0xffffffff, 0x2, 0x10001, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9bd9}]}, {0x7d, 0x6, "6c48813c6697b842bd80b0dec809a88784f469b5f46b2c346d5d2642f1d53b339bf55eb4c43035fb5abe5532f67b16f9d1cb267c5bc3999588443f73b524d419c1bed828585387b5e277e14804bdde4e8a95644eaaddd1a1344f4eaaac855b83f44349e2f6059822ff909c1d3f0d879897f91dffe207140dfb"}, {0xc}, {0xc}}}, @m_simple={0x8c, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9c5f, 0x101, 0x8, 0x4, 0x100}}]}, {0x48, 0x6, "936648baa672beac8cdf57f331052a6d875dc9018efbfb20993d0ea3f59e940fe72a4416cd7e3ca5252cb92069bc691cb6a674a11c0387e50b10a5cf533b907cdd4f9bc9"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x40, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '+\x00'}]}, {0x9, 0x6, "b0f6172671"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x4a8, 0x18, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x8000, 0x101, 0x4, 0x68f]}]]}, {0x75, 0x6, "d1227176520370f665aaca58dacbf404e120be14c6565b054588bbe496f49b0718bc166622d27bf379a6c37ff77fa2e5b15e161f0b83b8c5196a2893d2bfb1301e6446f9944d1fbf942ec42efa382accdefaac305727000020b8b1d902899791ad42c4c34186af53e4d58106fc2bff8101"}, {0xc}, {0xc}}}, @m_bpf={0x6c, 0x5, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x3a, 0x6, "28134701b03aaefdb6bdfb5cb3e2dee04c70a41c44d9be4727f9d3ea5866d84511a722b7dcdaa5ca498eae163c9ec4e71726e087e7a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xf4, 0x19, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x10}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x0, 0x0, 0x167, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x92}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x10000, 0x1, 0x1, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x94, 0x0, 0x8, 0x8, 0x7}}]}, {0x5e, 0x6, "206d69c73d061c6b4f7a62c7e573a172417b55ce7ea91fe0f5660cd5c507e65ef42fff9f106b582808f3506543cc333e86305c17ed3ce7791ffd5a49c2ab38ba39e5bec03f1647881c6bb1acb071c1e0fa708e22e956f7d84d2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x6a8, 0x2, [@m_skbedit={0x134, 0x1d, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x4ea2800, 0xffffffffffffffff, 0x0, 0x3ff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xe5, 0x6, "7c590f8103992403a1f2b4099b6c61a0efa5aa1644a0e593ad463b86f885dd67f0c878663b0ecb8b51e339f1fc032c6d08a7c225106ee90c50ee444f1d3703aa81e868ff2568a13524d8e52855f470d685944a3a47c1e93674924f7a827f964da3fbd90c0210426d6066a4b9f1aa470ee389f4b000e4fb168ae45d8507381eef46f1dfd91d8821b9c4a01f20240525da3dbc99d67a8c3dab3a03556cc90d325dfafdab3c69ba3b858424514eea44e2c0a8c69352ea8469e82726759d3ea417c424083c9b1b0266c384b360e13e5ad97d7fbe495223412e599911ab409047f375de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xac, 0x15, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3f, 0x2564, 0x5, 0xfffffc01, 0xa1}, 0x1}}]}, {0x2d, 0x6, "66a214e92a611fe746a614f8e3345918ab7f2e61e6cdcc9081faab25611380a9a8fab4661c513dafa5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x4c4, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x800, 0x7fff, 0x1, 0x0, 0x4, 0xf5, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100, 0x1, 0x3ff, 0x17168cca, 0x26, 0x2, 0x0, 0x7, 0x5, 0x9, 0x3, 0x2, 0x69, 0x4, 0x5, 0x20, 0x0, 0x9, 0x6, 0x4e, 0x7fffffff, 0xffff, 0xfffffffb, 0x81, 0x6, 0x3, 0x10000, 0xb17a, 0x40, 0x1, 0x1, 0x2, 0x7, 0x6, 0x80, 0x100, 0x0, 0x4, 0xda2, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x9, 0x456]}]]}, {0x94, 0x6, "ff7ccedabf18e0c6e6aa7cb50addcecf4af194a610abb221fbd6a977c271b8c00d81e9ce3ed2af24bf01b11e7a608a7a0f15d500c46680a22fbb5b0d4681500bb0216c0cc07c2ef885e9811c009a05cc8f9146f22707c1e1b49a1d501f4c5a7a3aad7d6708ba115bf5988be1d7da06e171cd53c4659a1d43c42a538bad5146811c47ced54266120e1ca17e7e3bfa43bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xec4}}, 0x0) 21:58:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020a0", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa}, @generic={0x0, 0xd, "7a31316a385e048a822ba7"}]}}}}}}}}, 0x0) 21:58:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x4020940d, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:01 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8983, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @remote, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x80090120, r2}) 21:58:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0x39, 0x0, 0x0) 21:58:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x3f00}) 21:58:02 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'team_slave_1\x00', @ifru_map={0x0, 0x0, 0x7, 0x46, 0x5, 0x40}}) 21:58:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0189436, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}, 0x0) 21:58:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 21:58:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'team_slave_1\x00', @ifru_map={0xff}}) [ 2993.408369][T13741] team_slave_1: mtu less than device minimum 21:58:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@mcast1, 0x0, r2}) 21:58:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x0, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8910, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, r2}) 21:58:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 21:58:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 21:58:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8904, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:03 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 21:58:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8912, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) [ 2994.202574][ T2637] usb 4-1: new high-speed USB device number 98 using dummy_hcd 21:58:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@private2}, 0x14) 21:58:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, r2}) [ 2994.403086][ T2637] usb 4-1: device descriptor read/64, error 18 21:58:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300), 0x8) 21:58:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) [ 2994.677480][ T2637] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2994.872939][ T2637] usb 4-1: device descriptor read/64, error 18 [ 2995.003350][ T2637] usb usb4-port1: attempt power cycle [ 2995.422382][ T2637] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2995.532905][ T2637] usb 4-1: Invalid ep0 maxpacket: 0 [ 2995.692546][ T2637] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2995.814932][ T2637] usb 4-1: Invalid ep0 maxpacket: 0 [ 2995.823463][ T2637] usb usb4-port1: unable to enumerate USB device 21:58:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x0, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1600bd7a, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 21:58:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0xc01047d0, 0x0) 21:58:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, r2}) 21:58:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}}) 21:58:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001480)={&(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 21:58:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 21:58:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, r2}) 21:58:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 21:58:06 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote, 0x60}) 21:58:06 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x40044, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 2997.432701][T32212] usb 4-1: new high-speed USB device number 102 using dummy_hcd 21:58:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000040)={@loopback, @empty, @rand_addr=' \x01\x00'}) [ 2997.622687][T32212] usb 4-1: device descriptor read/64, error 18 [ 2997.895280][T32212] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2998.092372][T32212] usb 4-1: device descriptor read/64, error 18 [ 2998.213030][T32212] usb usb4-port1: attempt power cycle [ 2998.622414][T32212] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2998.712814][T32212] usb 4-1: Invalid ep0 maxpacket: 0 [ 2998.862312][T32212] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2998.952698][T32212] usb 4-1: Invalid ep0 maxpacket: 0 [ 2998.958521][T32212] usb usb4-port1: unable to enumerate USB device 21:58:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x0, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:09 executing program 2: socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="500500002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32], 0x550}}, 0x0) 21:58:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, r2}) 21:58:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) 21:58:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x0, [{@empty}, {@empty}]}]}}}], 0x28}, 0x0) 21:58:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020a0", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 21:58:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 21:58:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 21:58:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, 0x0) 21:58:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0), 0x0) 21:58:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) [ 3000.762673][T32212] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3000.952599][T32212] usb 4-1: device descriptor read/64, error 18 [ 3001.232634][T32212] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3001.422348][T32212] usb 4-1: device descriptor read/64, error 18 [ 3001.542879][T32212] usb usb4-port1: attempt power cycle [ 3001.952354][T32212] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3002.042643][T32212] usb 4-1: Invalid ep0 maxpacket: 0 [ 3002.192384][T32212] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3002.282952][T32212] usb 4-1: Invalid ep0 maxpacket: 0 [ 3002.288732][T32212] usb usb4-port1: unable to enumerate USB device 21:58:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e20}, 0x10, 0x0}, 0x2000800e) 21:58:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020a0", 0x22, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {"f794"}}}}}}}, 0x0) 21:58:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback, 0x2}, 0x1c, 0x0}, 0x4c000) 21:58:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x0, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 21:58:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 21:58:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0xd, 0x0, 0x7) 21:58:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8918, 0x0) 21:58:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) accept4$inet6(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) 21:58:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 21:58:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020a0", 0x22, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {"f794"}}}}}}}, 0x0) 21:58:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000140)) [ 3004.083455][ T2637] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3004.473314][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3004.483277][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3004.511572][ T2637] usb 4-1: config 0 descriptor?? [ 3004.564181][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3005.722837][ T2637] usb 4-1: USB disconnect, device number 110 21:58:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x6, 0x6c9, 0x0, 0x0) 21:58:15 executing program 5: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="391ffe1cb938"}, 0x14) 21:58:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020a0", 0x22, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {"f794"}}}}}}}, 0x0) 21:58:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit={{0x14}}], 0x18}, 0x0) 21:58:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5460, 0x0) 21:58:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 21:58:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@empty, 0x0, r2}) 21:58:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x1}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) syz_emit_ethernet(0x58, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020a0", 0x22, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {"f794"}}}}}}}, 0x0) 21:58:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@loopback, 0x0, r1}) 21:58:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1}}) 21:58:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote}) [ 3006.805475][T32212] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 3007.174656][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3007.184037][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.220879][T32212] usb 4-1: config 0 descriptor?? [ 3007.271352][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3008.443355][T32212] usb 4-1: USB disconnect, device number 111 21:58:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'\x00', @ifru_names='lo\x00'}) 21:58:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000040)=0xcce5, 0x4) 21:58:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 21:58:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000340)={'macvtap0\x00', @ifru_hwaddr=@remote}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000001400)={'macvtap0\x00', @ifru_settings={0x8001, 0x0, @fr=0x0}}) [ 3009.022428][T13882] device veth0_macvtap left promiscuous mode 21:58:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000000001090400000000141a000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100ac14140008000200ac1e00010c0002800500010000000000080007"], 0x68}}, 0x0) 21:58:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x0) 21:58:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0012"], 0xa0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 3009.498474][T13887] device veth0_macvtap entered promiscuous mode [ 3009.585765][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 21:58:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x6, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 21:58:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}) [ 3009.792395][T24932] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3010.158703][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3010.168936][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.208691][T24932] usb 4-1: config 0 descriptor?? [ 3010.264418][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3011.416151][T24932] usb 4-1: USB disconnect, device number 112 21:58:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, r1}, 0x14) 21:58:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00'}) 21:58:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x8}]}}}], 0x18}, 0x0) 21:58:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}) 21:58:20 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x10}]}]}}, &(0x7f0000000140)=""/183, 0x32, 0xb7, 0x1}, 0x20) 21:58:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="8b"], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:21 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) unlink(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 21:58:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}) 21:58:21 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000800)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 21:58:21 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 3012.432512][ T2637] usb 4-1: new high-speed USB device number 113 using dummy_hcd 21:58:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x97, &(0x7f0000000300)=""/151, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1, @empty, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}) [ 3012.813262][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3012.825100][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.893090][ T2637] usb 4-1: config 0 descriptor?? [ 3012.941978][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3014.133138][ T2637] usb 4-1: USB disconnect, device number 113 21:58:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000002e71"], &(0x7f0000000000)='GPL\x00', 0x5, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x2, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:23 executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/190, 0xbe}], 0x1}, 0x0) close(r0) 21:58:23 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 21:58:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff000000000000000085000000410000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000700)={[{0x0, 'net'}]}, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:58:23 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003f00)={&(0x7f0000002e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000002f00)=""/4096, 0x26, 0x1000, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={r0, 0x20, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}}, 0x10) 21:58:23 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000500)=r2, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) 21:58:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 21:58:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc002, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=@raw=[@generic={0x7}, @jmp, @alu={0x4}, @initr0], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000000000400000000005f30"], &(0x7f0000000140)=""/183, 0x28, 0xb7, 0x1}, 0x20) [ 3015.175241][T32212] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3015.543406][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3015.552764][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.635698][T32212] usb 4-1: config 0 descriptor?? [ 3015.680760][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3016.853257][T32212] usb 4-1: USB disconnect, device number 114 21:58:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) 21:58:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[{0xf, 0x0, 0x0, "fba38e2e46e7e94a4c5825da828b625da99ff511817112ad9e6bf401db9a037f908609759adedced950e314091ab4f6c77d34565b579fdc9a31be9aa039d1be4f6bc27c845dc6b45c22a21bfe1550eb3f14cb3c95cdf6d839368007f4ddd1e765a6ade2b988f449858ce30e3c28eb4b113cef9223dea46b40d27b3b9e7d7c3ddeb78cb6eca5200a2210c8909f2f4b3496da0feea6a23bbc5bebb887fe13d28e56032ecad9bca7f126e76693cfbd034cca9"}, {0xf8, 0x0, 0x0, "fbe8bbb2afd3b4967c9bd6a69c89cfdcfc05e87ea3bcd81e71762e6438d0e6bcff60a81703ff0f52fe001421b0dbe4dd6767ca86fce01b8e763199974b4ccd0152ebb9541b7e0345ba549e3f60714e761ab2539ed00031bf1e10795df07fbc87f94e1a4efc139f8fec781c91517dddda7309d5f86d8d630619bb15959aaf9fc2b3ca1d4562f6b607a7b91ff2b3b4dc99e58e2c696a8a46a9a935a07cd62b6694179ef644c30527e1139fe6a69b780dff196c6cd537b0e7fac147856a0485849e5be520587ca7e4e7b5a48491eddcc59e68b7cc773b12a040d5d8b1ead9b8bcafd0"}, {0x40, 0x0, 0x0, "da697cc40d68ce4d1c9af2fccd7b5e5ec7004dc97e2f1ddfd0bccd3a3e60b2ac38cc4d5aac9a63fb91"}, {0x78, 0x0, 0x0, "d813562630e29be1e237b3e0fa4dec80599d9979796fbc5d514772c3898438897f28553d00ae3db33d8092fee48f2700e63de733a3291b67830e4fc1830b5a41f87f68ef30156e04b548b96ad0528bcf177abd4948d783bd4a68976e3bf50cd759"}, {0x18, 0x0, 0x0, "ce"}, {0xd8, 0x0, 0x0, "4c07a0c1409ff79d8623e207b3149d7d08f288161654f2fc71a14bd6d27a7187029f4f882e08c1bc5a907f1153a757636bf7979240e86caefb83567ea29ed4319b7169a7233e6dfa169773a2a3d39796e9c09b074abe0224aecf501753c3781b9082060372b5dab9f32acc92534d6ca03ca6e8c3b08084ab00b197a3ef091f6a56eb7a7335169c4771bba4429ce1672b126ba1d4e38bf2daebe44447417fda536a4190162011607457770f011b275a06200f301bb1251afdb32632e03c6a1c5606"}, {0x1010, 0x0, 0x0, "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"}, {0xc90, 0x0, 0x0, "9ecffe6b89171ed9b41edc3afa431ab9f75bff99bd60ca5c8d97a16b41498f8ffa4ca1c79606dc341390729da9a3a3d60faee703be344a968cd7578625cee7a909cc2fdaa3d0c2ed0aaf0752e7738dc5f09f29996cbdf47bed964efee055e0ddf0153accf9511f06a8ca918a5e726a0b5a79d9884be90d5a5ee4b0544aa4c22d7651015223754728f2df3275dad07bcb9b4ae047df47d7b4e73558bd9d5bb724b5686d687346ff06473d74ce86eb803c84f1598dbd07e8a492629290d08961ee0820be6bf7a216ca4838529ba281b6faa84c134b7d2583df992df505abe2ca77a6ea1e352748e652a81411f9b748cc4b432812d1dce1ce2ca64869cec5dd99cd6ad6cdd034ce8f1b8ec301231a5f624ef3c5700c1d573d50e31eb2f7ce45043c2c942f49c87b837fddd0acaa9ba94a50d362af390a76b938edc35c68be60c2acdf06bab956f3ab71dc454ae0b66afb39e6572156bcd41d0bd2dcc40dbee66ce1e341d583bf6cba2d977baba5100e4246cbe87a4c93961119a37820bef1e5f2bd1f7a421b686326322cfe454eadc3ea4a34271077882714ce453d0b4ab04adffab7991a26d6313098924896f725d3f48ed2f819796e59ca3755797eecdbe0e0ecb48e0d74e03042ba4f001b30c6d4f6cfdd2c70fdce8947a933856646adeaa32b74991e2e3300940f5333ff7c3f74913f0342f94c91502c8b84ed71797290d0b767507bc2880d195289e1a71eff9526c5ae0c2fe0736a1d0a057a33619e4bfc4574aacadcef5636d4c63b59f09937cabba0c29614f480dbad3faa5eae6a052c82d464b3f1b312a87e6a889d9cb2b0547e4a01190c9e937c79435825478ce32b9909e5c2ab6edaaed129af16be51d8a0643de2db92e489c847c439e6edef9f9d3d936db010526fca25a91615c96295bb016c067d0050b3fab20a83856b1c956df4176302b4484b151e7d4c90f3be3e0fcf9ae03287e4cbac1d2fe047774d06b1e5a40cc512ca8e5f7201e604dd5f45eb3b658e16595ded8ba19f005565d489016c21df7e937215b13a8865fa411629b63f7554e1fd760bb47c45abf19cd7f79846a871aa6c93905774c9f8bbf764f3cc55a9c0de38c970b1acb51b7177a861832fe66d782783893465435715d6e35546a49188f647027336d002bc4004d264af71a6bef8bd5ddad284c251a415f6375070abe63590d2813e4ec7d356627a4c7dbf5518d24edb2eae0b3d447c40a6ee311f5f7af1df03ac2b92f0dba6e5045515ccf86c2ba30d6709a51870e4819639f0719f42a6ba870ca8b8e8067ed42925419a0826bfd3f3fb24d7f755633cd618cf534b38babe886556e7fb415a4eda2b1ff3116f64f2f39ef84498db8658858f4c7cce1e5858a8dba703ea22a4f6c251030bb5a7a97fbc8320b79fe54f0329bfd43694325607bb87e3f67894b0ab8cf6236ed88f7bb72ea6a447c4dca21770cc856b3fc1ea19c65dc8acee48e496d845df80e3b634be690c2b01add14c384c9f30605b566a46b0cb3368eaa99ec3c18780bb3dafb7294897838a030138807964a4b3b3a00b890e8a66567134ca17a5c7eeb8c126a9bd9eecd4c82f6ef255f7a1112ccb85f845b8f938b38571a61a8ca233a5ca2a56e1363981f1cd49cc401dce11b58f8f812023e9154850761f4f87c3bcc5d553345acc2f8a124085a331857ea38b9c21335e667075682f1d9cef1f01b2d8380ee42899373780971100ab277a8f5dd5ec01487bbbe6bc7d7fc875f823cddfea7e2eabc87300511a00ec068b7d536f1132a8fa32b7362b3a25506c9896b3eb9996e69f53d0a5614308886fe99bc6bd4f0b165f82dbc4d3270c53ef1d21b22a7804d3b5a726cfc993f32543dcc480440efa0f91acf5adca02023721c24e0c5140dae9dd5c6205bbcee5ebb4ed77c6f5101ead2d34fc13c835f59d107712ab4c255d0d9e1966fe304f2c2b2f0a721c97789f5f732d509889e4a0e69ab77bd0f89944ac7cceec5f7b0b9b478a6fd247c52ec07258546d0983ae0e4e9fa4cc40b874874ddefaf56dd899f58c1586d73467ac0be406db0b7d51e596e81d7e033df9a36e6f0f8c157cb3acac5d43de512011522aeee7d5c4c9275b3df604013c4788c9018f0fb08561fe2d62015faee8946d229138b6b7702be95799d5162bcc185b96d0069cf6568e2e809e61268467eaff2454546e04aab8a1a29d57629a098fd72cb3fd09fe7b1f5daeae64d97f699e8048d05d7c904f2abaeb38e9e795dfcf35ecb879cc15ccac4daf510560e09685a08397e1a5643f587e507f9077aa10e69f858bd6dcd4d844d8a5d80c0eddfc7dea0d0f77d3fbe212ed7833c20474eaf2004eac5ec97f5851455a30d93339e7dc2c4e048b5d4701544a25a95f0811f08e8575e5e9baefd7f70d85e78ec8044980f3597f115c69614cde0c640d31dd758ff58e55c882f2afd3adc0d7ece0be8f2f097f9cb32709c5c9012453c6e9e611f7eb3ba90c242056b69771287d13d313f1d7184a21b3f8c6cdb2744cb188236aad6ac056ec05e542826b6efacb5a94cf58b57cca2e6d0c6bbebd4b1c8d81283640230d087ceda63b2a4fb2a3487edd296665c42efb79c5e4389ddd77235cfc4c4988ff777c25ef91a044bad73e7565e84fe06895b2ac834bf8e77200bd9ef793811e36693635750aa09c86d8ee7a1370ce35aa9ceb59b798ac6be4f8c82a2f8f26f6efe1c41efacaaba5e09d779fc8f42e01fb5d3e0abe2c23544892519b8246381c0638e1e7bf4dbd232f115e4c80d7e59ea322121eb703a02d0223f705daaf95a550661d2bc268919b0a389317a4fa0d0895eec9f6d28b39b74ea772a35b8f88c94e2c1982146841d49d6cdd36bc2dd725abae02619229da64a5bfc722e013cb665e65291ca9659e67a80062376057d25975a45dc710639468025717495dd2c9fc23ebdabb82881f6b6aa8606cd24948934dfbef52b17063868da9a749bb25b13066543eacfe27e265ffded7d24591b96b1a382d34961b7af7de8fee6a427d43e6b16e31a80312797885d4264205e192a5728bd83adf2eab4339dd3b8883a248fbe9a8a6ead4d7f65b1949d14893cd106fc64d5d556e248497ddca840d7f972a1bba752a53d76a7ad3a54ef3313107e6bcb3e8dd452718cb0ea2bf89085d66766b2a7affe7f6fbdb45050f31d502589aa3b4c83a180dd5550acfcd3c070197fa5bb5f3b7484f24d194e827dbac8b38bbd6cdd989608469b2667efd75ee264ab24c0a9568f23989375f4b3388cc6b600624e56fc2937ef544abcbb5323facf04d61af3e275077e410543fef38d6d98ddb4998d713e3804b8a44be3092467ec934843c5a2010a86707d4ae0abd7a5cadfcc97a88073672ccda57b2b067fa3cf3fc7ac1063e12761887e9f1a9ea823a9b32c0b0e0dc3e14c2d0c49513554f784604a0adef797e76097e5ee6825c18b1e9080c2ae4226bce0c74d3d23da5ce94dd5610e643724de60e693f6f1c40eaf5ce7892b06c21ad9fcf52ecd363eceac5b2261d25e91d534fc8b452e6903a9c792c9c210716d3b780a366c03ece396064294e8a8479e634e2b87b36a7476d05fb3098f5b9f3fd7675737819263ac25df2c354c10eaec049ae428ce178dc49f6c50ce9566f1db31ff5d9b63a824338627b0105578b029a85fb0f914fe35ecdd739b9f8e24f7835f9dbb19c5efcb193946561562975b15a274bc12028b19c674e7455efdf323ebbb23a82ccac94762d9d8e28135b2fa4a5b09c1033825814e7c7510f4d721e1fce4e760a808a4109f24754049756ac8a9b5fc7342d3a6df57f2898c1d9529c9d422aeeda8f0c078ecc173d62196e6068912093b17274b2a90feb604e48704814770868610547cf5d87826839b42901e21524bf1847d7c0faa5f2cb585799a8fd24fc81fb0cee302218bd3fc22785c9ad00a78e76fe80091016cd2d759815d7e2ce5558675059002c54ec9c264c526be347d4e1ef461e68196cf364d87f08a9ecf4e86179502ea101e5a75d3c7714d06e04aa1ad11fbc49b3183bbb16a4ba1fc51aa75a5119601d2065ce6e3415aed507c1851dac458586d75d1ecc20382302ff12df91fd289e26268a8d9926a2fa759a31f43b71e218e01c4298fd954df8caf13723a6e0bbff378b5494b89f70fcb0466f4533865fc07979dfccd5304d302ebf6d1bab5278ec6aff3cfdf2cc4516acbcadea92f6ae3d16c40929c53a2c94f7689f03ed6d09242419a44cde5cc80a768626ed21ef4bf7f0b9dfc21d9af96509dd2029e78fdddceb16491e39d0f80489217c9b050059f2718c3ac9a747ce516aec19cfb40349d1beafdeabaa84857f584a30b563c1a6bf7640164aba14b8fdbf8c91e6a333dc1981550331a58af5a5f2c73f44b016cb37bfdb9e5ed3f95d7e2ba425844d81925e8b82147d640aa0293306f9fd60d587c1a88a2561ff072acea1d37d36f896c66bbf48344fe221e247d1c348c0211ddfa07b6f1c5099837d111728ba26cef2ab645b"}], 0x2008}, 0x0) 21:58:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') 21:58:26 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000000c0)="920704d53735546269dacdd2db38693b80084a566c4b7ef015b2c5162139eb3c8296c7ae8c586be79543a4620c0381f13093da2389682eeeb5417f53185806fbaf00e9cca6d265dab6988e57d66492647aa53785efeab33b03826525901875d18ce7a74ad14e20774b02ff581a5b865d01354fccf48f9270637df715f14bdc32c3b95575b599f03ee434225268905cca6c574355f81659d55bf3f4b89aa34a767f1f78632bdd", 0xa6}, {&(0x7f0000000180)="e38758765f93c28dbd1395e841195dd29c7a3472ab3a213327622689584e57d33cc4cdaa6e4d3196b68928b04bd74aa5e27aa578c5c4ccde6a1fd667c7b9d701bd91b3720b0716a062e66434a63669c56c17cf5e30142c0c3f519e0b1adc519a870e4bb0c431b2bee0b30dc39a8414f0b5ce609a28c1f255aa0f2a8d60be9caff8b594aa5f0cfa35395642e0506896fd50e529f08ed867e86965df913aa0de1ee8", 0xa1}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="3cf0bf7ddf96271a25f06f59b77208d32cae9e3855a0fb06a94761f4cedaef66f3bd3514d62f0683532f813e8f085c46e0e8d8291daa46f3ef069dfd9db9383f5f210362c3c5e97adcbff6e2469fe46947031bd03e9462650a79bbbef768f906c3c4f8f74f19c2e5d32b6e7dc69c11c78ce4f5de64169d3ba566d1859e4f4b780faa2079750b9a3551508101e76f932216", 0x91}, {&(0x7f0000001300)="a8c55f377765f127b7c67efc150ef2c9e321bff72357059407f8db01f94d67ab247487b8856a28e23c4c36cacaeb6652d46df58d42be87dab6b027329a7e07177fe97f5872f9a90c6060a069a6247cda8a30", 0x52}, {&(0x7f0000001380)="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", 0xc57}], 0x6}, 0x0) 21:58:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000080)=@raw=[@jmp, @alu={0x4}], &(0x7f0000000000)='GPL\x00', 0x4, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000080)={'ip6_vti0\x00', @link_local}) 21:58:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x6, 0x0, 0x2, 0x1, 0x1}, 0x48) 21:58:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) 21:58:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000140)=""/183, 0x27, 0xb7, 0x1}, 0x20) 21:58:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000140)=""/183, 0x26, 0xb7, 0x1}, 0x20) [ 3017.873275][T32212] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 3018.232864][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3018.242683][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.261718][T32212] usb 4-1: config 0 descriptor?? [ 3018.310148][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3019.486659][T32212] usb 4-1: USB disconnect, device number 115 21:58:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x0, 0x0, 0x2}, 0x48) 21:58:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x0, 0x4, 0xfffffffe, 0x0, 0x1}, 0x37) 21:58:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1, &(0x7f00000001c0)}, 0x2) 21:58:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_fd], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x89a0, &(0x7f0000000080)={'ip6_vti0\x00', @link_local}) 21:58:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f0000000000)='GPL\x00', 0x5, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:29 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003f00)={&(0x7f0000002e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000002f00)=""/4096, 0x26, 0x1000, 0x1}, 0x20) close(r0) 21:58:29 executing program 2: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0xffffff6d) 21:58:29 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 21:58:29 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file0\x00'}, 0x10) 21:58:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000003780)='syz0\x00', 0x200002, 0x0) [ 3020.552353][ T2637] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 3020.913812][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3020.923903][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.946202][ T2637] usb 4-1: config 0 descriptor?? [ 3020.989939][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3022.179057][ T2637] usb 4-1: USB disconnect, device number 116 21:58:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12}, [@func={0x85, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001700)}, 0x0) 21:58:31 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 21:58:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x0, 0x0, 0x0, 0x254, 0x1}, 0x48) 21:58:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x12000000}], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) 21:58:31 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f00000009c0)='initcall_level\x00'}, 0x10) 21:58:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000140)=""/183, 0x2b, 0xb7, 0x1}, 0x20) 21:58:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 3023.203100][ T2637] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 3023.593891][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3023.603338][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3023.619214][ T2637] usb 4-1: config 0 descriptor?? [ 3023.670280][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3024.815745][ T2637] usb 4-1: USB disconnect, device number 117 21:58:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:34 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x28, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000140)=""/183, 0x28, 0xb7, 0x1}, 0x20) 21:58:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003f00)={&(0x7f0000002e80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f"], &(0x7f0000002f00)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 21:58:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x10}]}]}}, &(0x7f0000000140)=""/183, 0x32, 0xb7, 0x1}, 0x20) 21:58:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 21:58:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000051000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') unlink(&(0x7f0000000100)='./file0/file0\x00') mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 21:58:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @union]}}, &(0x7f0000000140)=""/183, 0x32, 0xb7, 0x1}, 0x20) 21:58:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x3, 0x0, 0xc}], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3025.913508][T32212] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 3026.292922][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3026.302248][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3026.314737][T32212] usb 4-1: config 0 descriptor?? [ 3026.360021][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3027.543691][T32212] usb 4-1: USB disconnect, device number 118 21:58:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[{0xc8, 0x0, 0x0, "fba38e2e46e7e94a4c5825da828b625da99ff511817112ad9e6bf401db9a037f908609759adedced950e314091ab4f6c77d34565b579fdc9a31be9aa039d1be4f6bc27c845dc6b45c22a21bfe1550eb3f14cb3c95cdf6d839368007f4ddd1e765a6ade2b988f449858ce30e3c28eb4b113cef9223dea46b40d27b3b9e7d7c3ddeb78cb6eca5200a2210c8909f2f4b3496da0feea6a23bbc5bebb887fe13d28e56032ecad9bca7f126e76693cfbd034cca9"}, {0xf8, 0x0, 0x0, "fbe8bbb2afd3b4967c9bd6a69c89cfdcfc05e87ea3bcd81e71762e6438d0e6bcff60a81703ff0f52fe001421b0dbe4dd6767ca86fce01b8e763199974b4ccd0152ebb9541b7e0345ba549e3f60714e761ab2539ed00031bf1e10795df07fbc87f94e1a4efc139f8fec781c91517dddda7309d5f86d8d630619bb15959aaf9fc2b3ca1d4562f6b607a7b91ff2b3b4dc99e58e2c696a8a46a9a935a07cd62b6694179ef644c30527e1139fe6a69b780dff196c6cd537b0e7fac147856a0485849e5be520587ca7e4e7b5a48491eddcc59e68b7cc773b12a040d5d8b1ead9b8bcafd0"}, {0x40, 0x0, 0x0, "da697cc40d68ce4d1c9af2fccd7b5e5ec7004dc97e2f1ddfd0bccd3a3e60b2ac38cc4d5aac9a63fb91"}, {0x78, 0x0, 0x0, "d813562630e29be1e237b3e0fa4dec80599d9979796fbc5d514772c3898438897f28553d00ae3db33d8092fee48f2700e63de733a3291b67830e4fc1830b5a41f87f68ef30156e04b548b96ad0528bcf177abd4948d783bd4a68976e3bf50cd759"}, {0x18, 0x0, 0x0, "ce"}, {0xd8, 0x0, 0x0, "4c07a0c1409ff79d8623e207b3149d7d08f288161654f2fc71a14bd6d27a7187029f4f882e08c1bc5a907f1153a757636bf7979240e86caefb83567ea29ed4319b7169a7233e6dfa169773a2a3d39796e9c09b074abe0224aecf501753c3781b9082060372b5dab9f32acc92534d6ca03ca6e8c3b08084ab00b197a3ef091f6a56eb7a7335169c4771bba4429ce1672b126ba1d4e38bf2daebe44447417fda536a4190162011607457770f011b275a06200f301bb1251afdb32632e03c6a1c5606"}, {0x1010, 0x0, 0x0, "a85a4dcc987c388bb129d5f94684246663c78b4b9ac23c1165e79bb3f549aa17b9cfb9be848990118d738213f3a37b2c00a2c3c0825f4f5bac8b55659f3f6999f13f1e796ba75c1c5094171ab7381d8823c5b517a5c68fe6aecc888219402291033d0aa2a64a87faea9c9a5001990b736dbda67d834cf1c81983ca80e7d08117051f313e8767836cab528bcd58de6e2ba08dcf5c5e0ace28ccbf38aa2ebf1514f4df37544370bfa108a5f48e4279ed91c27b6d2f54382174c8f58d3b9054b0319b6ad6c2548f7bcf3340dafcf6e35827ab24f46ac808c54dc00b4ee8a9a186dc8313ed8cbed31f785ccb995777e5f1ccfd56f085cca9ecf2803ae8047f51974f52d5f50dbf992f95e1dbcbfa16e6e481b9ce8b2f68795e703f922322e6c7ddc100dd40fa07f8148483297120ec7ec9d36cf7cf67fc38c710a38b58123bf389b8133445ecdbeae25dab6e0e60bfe037e802e06f33e8705ca4d5bb6569a6865098466d0e8c9a6211f87e1c077e8ef09a7ffc4ba7e2de1a07fa4b3f712d51d0a92e7aa646b7b191fc697def3591ccef714357a417cfc4ab4a8a20bff008d54b678541f580cbcdff55a4fa4731bfadce0f9d42fda1f3afd4f0d1f5affc57f9391180d1aae81c2bd88ea01767cabfd601be5855dad8d1d9eb021e7206d871e5b77f6071692718199758dda1838469782ba78a4e38eda77fe89fb1ccaa373a931eceb47c7eda9c857d4090e2895a525b6bcc0a8468713d7e7a3d7131c243f60d8188b86444c1651a4dbda5b1be6d778d2758f4e2113db5527f07159fab837740fbaee4859111cd1a236aa74c0ea7ae189158a8c6e124e8759f6a686b0a83906c2e43df434fad08af20fc0dceaab4abeecaedb45fd1b8a84fd77376df19d0fdc83807544fb50a2c6c6f2c946ecd5264d1ccfca9d03e67c81601eca9f5d355d5d036886383761e837621c79a1f37daa741f2d38a4bf60d25925de5037183c94a00cf6012db4d9f473e36cfdb6e8ffffef104ac7e3e78276c681da0a823e2e8b1905818c478861960395d58ae70fdd3305054e21fee41c58523e7bf259cd92eb3298d3f9c6a858d31183f8aa756c1387ab381af902feaae2fd5a7f1098570c5eba70b9d67755b2bc6ccfa4a70b20cbf39d965a833dd58af896ddf9b7eb100a616181304db07d09dfc8872f864e03902fa5d31c7ac3b7516dd760716eae235132700b0e0ab7dbceee381a5354b443604997650affcadce7e15810e913b9ff1cd9a73cb8ced91a0ccc0a1635bf79f513abc7c910b734b1f1d0764337fd01fc7df8e575b8510dd162a42b3f85e9817043315b5071e8a43f3a906f3d2c59d5684a1802e918b1af75982a788a35564207802573b9a4f5c5d822f7e6245311a1adfbd50cf9a322625842fd9fd65871e975973b5a1019c70688f55de0b83e8786e6106a87bb7d924156e0d9384788bba6cce99dc82392b82990b793c0609117f57531932b3c402813a1806d907634709714f2f9bec6664f3424e2d05b2cf19bc778a7ea5f158c51a9d0471c920c6bd3d0236691e41c09d5214f4771de52824c50f187395192be5442a16119c5ab797f8743d876e92ccbb6513effa6d5dbf17660e872d111aff0914416e3399633fb442f90c685bc2cbbf6fffcf561f40a979faa222c87bb82b7690055cec382acfdbcbdec676f81fb0034cf201fea0e11d61c9a29b94a043f9e661daf1fb5926f0e094480b308f4b1b45eaebaf02d27efc1a357df076ca9042ee9e1268af9bed8ed9a0e86d438e1dcc4403648c4d45daea0f7cf1ec2e43eb29641fe78612ccffd21e07b04808479b4f41241a2294a0f06a7cfd3d351899abe24b06d03952b872d5e47f0f56520a36604340f962846ff6a80c6beb5901c0f4052adc795bae66620a7e89ba4abbcef9d478b45b628994b0e0eb5a1631ea93ac815c08d8a1268f5c6fd07b8648932717c9bc152fd845e7444cc11c6839282f7a303330c13eb5c668a72fc973cdc10677c333e66cf1f8a179febd6542a023806ec6a6c73f9dcbdf91380e5934a41d26ad80d7b1061b39633f40b9bd00f1ed76a8ff5b8108e1e47f461668a500a7340bf1f3f5943059077c67b82b808516a6a35bd809d68bb86fa335daf4ba86b8acf25c9cb63abe306f13cf6c5ef867c8fb9be9a3dc21198fcf003e388226802501e44a0ab4a812908d069fc570758c51c936d92769397d9dc91c4446ce9c76408d5334fb3fa989ffb7b4fda4efff5ecca721a4688768c5293b82d57ec6a3c45f0ea2c19076936bcf39b9ea4a83eceac1f33686d3f88d2269f60e0d3c9b5828b00d6dccd704f51351dd2c986dee27cf9f7a46ec194af62e36b24d4a8c55326b98d41495de23767eee4367968164a654f173b25f3dddd0eadeba1967363bbf9cacbf65410c19bbbcb6bab008b6fe1d72a83a375193c402c818b8941bd6392dfb885f804263656e70024f423e5d7d772d2db84f0afa07370264f26abc1bfa258dee71696e1b4708a6e2d7af4cafd597dc4f33651dd22cbc96aa6899e3aa383cbfddc01a4cedefce231730b11e9f0225c215c545dd316c8f9a0deab4f67f59b880bce114521e1155e8806f48185e7b4c8cec0a1e96239a5111389ba543d744d86ca25bc5ede86bebf5126f166ce4fab890f3a2f9cc26b05d1a7e9b398c08523434f3098f86c8f813b0b609e7798939d88d404ab94f18ded42e660a50027dedfe7e21aab1a62f594359b3a5a9f557f7418c6d58c91ac0ba9dd22d54a671140b1ff10fc06d87d8f1393374736bf9539052f0873f6be69d14f15de2461720d931856605cf52000ea9f4da0dfffce0dcf3a16623b8dab0769426ad26c9b7ea6e27f145ee3430123de17429fb056b6879813dc5b06fdf3015e286a671c169e85a09093cfa75e0e5f48433d7d00da8d99c68392ead54691aa76ff8b0089776c8874503ccf620b638d3c59ce8a18a516c2200decf265f3cec5bf59d0d5823a5230d18020439de67ba4d5d5881804c6b11a1d0aca0683d4568ca0a857bc413ad4fef0b7bdd92d7ed0381cfc2eea7853bfefd7dde86fd2ae2b6ef0175b07ad24d2d4725af181b947fb48ec167d3e61b07f5f17c4cca25434e1a2d981e6d94357b27bcfabba09a0f1a5a9153266d0ce63ef0f500f6e1e54647407f6613a2298380a894abb803fef40c43eb9328433b0fdf850f000024e14cbb6b4a04d72a8d5a4a88360f5f3a3b384eb8d4ec1314f18d60394f157be3b8a1946df00ecc52e4146da2a4391de98516b0ec49d09e3d6122c91fe7787bb27631c773aaf64c4b9064297f13ca63c28e2d96cd7f16e0faff4bd5d446fe723185462ab13f0bc800db0b466c66478ecd408fce5734649b7fe5087055f8a4f551389efc3ae709f402ea1a2f154ade8f8a61828a3257992e9cab76324c5214cd90a3d7b41e6f1069d0d85b7bbb57b6fe9b67127c01c845eaf620c2ebaca994b29b23392aa24fe0d39f6f8b5edf39cae8ee25ea313785198e31dcaba15f22748aaf4394dc410aee6ea409457347422935eaea74cc0f389216caac11fc0ae16d39f94db7432421bfc28e4d8b115c730d7e22cf92f3ebc58e5e8ad03650a180779bcc9305530e7272bf406897ff75456f078aa425286c5f2a4140c54f0ec132f72aa529f0fd4e013a2e80837842a3506cde8181c931d51c9ed15a4a8c450572b431877a68de0c62a5c406c4b63544fb37436165b5596892b334c3064774c0eea30d3e3c20bfe33aba0a0d414ef1ca5e02e0f0c71883f0bf1ae1c41093f4cc7d830c3cdecb9d31a250493633223eb99155e0c4b05a0f87e40cf90a5b2ac79dbb368524faa4ffd8f665524219c6e6f9c4ab99eb7a8bf37700a76254ecda9d00afe66a512c6a52fb420a95534589fa906a9d521d8630985d10cddd152a444370c521af3314cc2abc10ae43909df93e44309186558dcc6cd2e68893a8aa558103d8bfd8a4651dac2183e4fbf3bf4b5e0d9b3c1835dcae5fe46298dfcb27a788f4763b50ecd1eb66a8d273cd6bc446f7a36ceafa28993533e8e1297e699063fe52a35191bfce3d347cdaf3c85fb595157b15d1ef6dbfc920b3f975bab59424f0855a761afc03f92349765f0519d774e919f90c8d9255ec0c09b4d8f86b2f0b6ed843dab457228e8c2ee70b65712939120796e1469a6a74991d48834a488109f684b70486650adb0b4e93ac0dd516a2972ee54903c5b4c9fb333c92e5374b891bde9dbafdd18a76c5db81f5aa4c6e1bf0e8de3f70ccd4b69daa9570a741c977d64ca5382ef5f43a4f076e799eb670a5ff9b26c3bc164591cdf301faa4635389a5e8d8e22daa8eb86fbbb2ba2802340834bbcdc1adfd8e9755323b1116d79e61aa808126eb5bc9b8ef6ad2d03de8109aefcb1eab253a609dfa9f3ae93d797cc050d910a6e347dfdd5a55a7a3b8ccf4a1bf715f22746051c128f90a387e9995063695f3b09e837212d89325b8b6234c939a35f46101be222c668274b8a0cb69e6351c1024b1b683523a0e43e2597ce472aebf45215b36205463a8ccb966b0fe6e3f84bcc868c0024981fbc30c890fffb74df1bbfb65ec1a64449e01c770131c8b6285d1f2883fe574ad35ee47a026863d5479e17dabc4ea0e6784f562babbe063e76e6bea7c4f9871e840fadea7da63073167a185fcdf4f03c233146884fae03843bbd1abe8b7ba446ac458533dbe2a39826a9471cea73582307063140e14ddd208e4a13813da68e193983dd0655b6098f2151ed443718c61150037b0e5672d540bb4eccdde3a078b590b4d7d79db73bb04816a97fb71144cb041de3a4c622176a5983037c6da7efee3acdd062b3de4f313d2d10ce67a31d2f63a2c0483ddcad4881071444dd2a988d438f6412364126189a2070a4c4becb73a1c37c24be9dfe2c55110d6e12a7354d03d9c95181b4613ea5456ab35278a23fc7a717dc11e34f03da868d6f868e53eaebafd07e1488806a45c915f85dd2cf27d610ee6b3d031f416975396d5cd52763c4f905bd3e3f5f26a7e4fb185e6c4318e30c3452729e35a8ce86b28ea07bb5a5256e0213d9a9c77662905d5719d80b677a7573e8b894845181f259142581efa5db1650d617d30cebae6231205e791068c2809e4122ed336e4974d4cc938acdb698379d666560d2def3178a9e423ccd47e5a05f2e1cc6418a3dd6398428a29840862fb063d806a5631735ade355571d4301ebef3ddc99f8f7495f9bc67b032213cc90b69ed9478baa0a6bb967fae6fa4270e2133ba9f24633a9a48eb522c29460ce1c0f08e408b9f532474843733eb9c4edb761a2eae227ca9de05f52ea83a62b6213327a00eb1ce25310969941a944bc022729dd34a2ebd22b4814215082f6700c14467629742dfb35bb9afccf521b61f0809f60cd15234772646b8728830452c523c4d5527e1314c48e4d114056bfff9531d51355a26fffc381c8d1556112dec66eef76411c69cbffa9dd0562d66867f53131fc941e0183c25d19f619d5879468707b1bf7536049e861c4a2c183b6f0f7eebfed0468e51e8c1dd61609f683699d7ae43b10b06e683384e3240770c5af46b770a1b1a52733bd2ab6db89e36046c6def234f3e6291a492693d2ef41248217479f1d11ae8836e8c7399d18639c9af758c9b0e2d5b29e4a532445c6778d988ea1b0c52b0b63038845c3a5eb531cf492ce1a15813a2354e7beaeb6f607a319ce226b6056be339de9676573b3ea26884b7639502e5abb76029bfcd8e01bf6a8338839051427a0731c4329ad940"}, {0xc90, 0x0, 0x0, "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"}], 0xf}, 0x0) 21:58:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[{0xc8, 0x0, 0x0, "fba38e2e46e7e94a4c5825da828b625da99ff511817112ad9e6bf401db9a037f908609759adedced950e314091ab4f6c77d34565b579fdc9a31be9aa039d1be4f6bc27c845dc6b45c22a21bfe1550eb3f14cb3c95cdf6d839368007f4ddd1e765a6ade2b988f449858ce30e3c28eb4b113cef9223dea46b40d27b3b9e7d7c3ddeb78cb6eca5200a2210c8909f2f4b3496da0feea6a23bbc5bebb887fe13d28e56032ecad9bca7f126e76693cfbd034cca9"}, {0xf8, 0x0, 0x0, "fbe8bbb2afd3b4967c9bd6a69c89cfdcfc05e87ea3bcd81e71762e6438d0e6bcff60a81703ff0f52fe001421b0dbe4dd6767ca86fce01b8e763199974b4ccd0152ebb9541b7e0345ba549e3f60714e761ab2539ed00031bf1e10795df07fbc87f94e1a4efc139f8fec781c91517dddda7309d5f86d8d630619bb15959aaf9fc2b3ca1d4562f6b607a7b91ff2b3b4dc99e58e2c696a8a46a9a935a07cd62b6694179ef644c30527e1139fe6a69b780dff196c6cd537b0e7fac147856a0485849e5be520587ca7e4e7b5a48491eddcc59e68b7cc773b12a040d5d8b1ead9b8bcafd0"}, {0x9, 0x0, 0x0, "da697cc40d68ce4d1c9af2fccd7b5e5ec7004dc97e2f1ddfd0bccd3a3e60b2ac38cc4d5aac9a63fb91"}, {0x78, 0x0, 0x0, "d813562630e29be1e237b3e0fa4dec80599d9979796fbc5d514772c3898438897f28553d00ae3db33d8092fee48f2700e63de733a3291b67830e4fc1830b5a41f87f68ef30156e04b548b96ad0528bcf177abd4948d783bd4a68976e3bf50cd759"}, {0x18, 0x0, 0x0, "ce"}, {0xd8, 0x0, 0x0, "4c07a0c1409ff79d8623e207b3149d7d08f288161654f2fc71a14bd6d27a7187029f4f882e08c1bc5a907f1153a757636bf7979240e86caefb83567ea29ed4319b7169a7233e6dfa169773a2a3d39796e9c09b074abe0224aecf501753c3781b9082060372b5dab9f32acc92534d6ca03ca6e8c3b08084ab00b197a3ef091f6a56eb7a7335169c4771bba4429ce1672b126ba1d4e38bf2daebe44447417fda536a4190162011607457770f011b275a06200f301bb1251afdb32632e03c6a1c5606"}, {0x1010, 0x0, 0x0, "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"}, {0xc90, 0x0, 0x0, "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"}], 0x2008}, 0x0) 21:58:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r0) 21:58:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x0, 0x8, 0x0, 0x254, 0x1}, 0x48) 21:58:37 executing program 0: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="7ab9c7474c2da1", 0x7}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000880)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="f942135fd892a02b788181fa4ab909afb42bc3192cbf282d613742ec0b57f9026294fd701ad41611bd08453a0ec57860f6b8d35fc31e31ce76d79c1456a1ee98f783", 0x42}], 0x53, 0x0, 0x1}, 0x20004000) 21:58:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x3}], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 21:58:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000000), 0x6e, 0x0, 0x0, 0x0, 0xc8}, 0x60) 21:58:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 21:58:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 21:58:37 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) unlink(&(0x7f0000000040)='./file1\x00') fsetxattr(r1, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) [ 3028.552483][ T4722] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 3028.963627][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3028.973023][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.017851][ T4722] usb 4-1: config 0 descriptor?? [ 3029.080592][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3030.227881][ T4722] usb 4-1: USB disconnect, device number 119 21:58:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8913, &(0x7f0000000600)={'wpan1\x00'}) 21:58:39 executing program 4: ioprio_set$uid(0x0, 0x0, 0x2007) 21:58:39 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 21:58:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc) 21:58:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x894c, 0x0) 21:58:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfd}, 0xc) 21:58:39 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), 0x4) 21:58:39 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 21:58:39 executing program 0: socket(0x28, 0x0, 0x7f) 21:58:40 executing program 2: syz_io_uring_setup(0x2f0e, &(0x7f0000000000), &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x14b0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 21:58:40 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) [ 3031.354841][ T2637] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 3031.733520][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3031.742945][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3031.785926][ T2637] usb 4-1: config 0 descriptor?? [ 3031.830206][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3032.998269][ T2637] usb 4-1: USB disconnect, device number 120 21:58:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:42 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000000040)) 21:58:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) 21:58:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 21:58:42 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 21:58:42 executing program 1: add_key$user(&(0x7f0000001240), 0x0, 0x0, 0x0, 0x0) 21:58:42 executing program 1: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="81", 0x1, 0xfffffffffffffffc) 21:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x0) 21:58:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)={0x44, r1, 0xe098d0f214a591e1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x44}}, 0x0) 21:58:42 executing program 0: add_key$user(&(0x7f0000001540), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 21:58:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 21:58:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a3, &(0x7f0000000600)={'wpan1\x00'}) [ 3034.021331][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 3034.028593][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 3034.042218][T24932] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 3034.403145][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3034.412646][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3034.444498][T24932] usb 4-1: config 0 descriptor?? [ 3034.490076][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3035.671115][T24932] usb 4-1: USB disconnect, device number 121 21:58:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:45 executing program 1: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="81", 0x1, 0xfffffffffffffffc) 21:58:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8910, &(0x7f0000000600)={'wpan1\x00'}) 21:58:45 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 21:58:45 executing program 2: syz_emit_ethernet(0xe81, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "4282e8", 0xe4b, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@private0]}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "4c05e595831f26ebdd34749af450954e10beb04c8cfac3c7ff10736520d4fe95e2510516b4df13ce47337818fbd91806b78b566a8c31b1b462879f6c21e5d35328305714d0bc8560b86987014c44e1d2a5c50a48fa65b19b2d601d652023032d1973c338b6dc3cf9b07f51e441c93e060e891c0b4c5496993e7974061ee1d3f2af4b808cc67aee96b9b0f5ae607d397705636c340659b07b34c1f0e755833aebd21d2cd9e6d4d4fdfe68f243ec224d4fa5847162b4925954b1de7a29501beef7f268d84b5fefa95ec262abc00b02e513bd84f1155a2eea0a34579e259ed07276da35bde0cec0b9454cbf052cf42c441a7928942cec8794a391d0a5de837a92588e0608e98c8488d0d2f911041c6cafcef7b1f15f3d64e869bd075b62f1514caa4bdc2220c911e59fcc0de04e497aaba7a805eabf657a67a9bd5160665470d683481722a3fa614fe0711223a7504e60c8bfdf2045386c810e8fd76323963b3c33cada6126fb58e032019c9bcc82f555a6e60721ccd54c4a190140cb9bcf9c24e07b2a44b4d50aca68d2c1f72779d9b78cf1f13676360b427976268fd5df93351e64b3928fd282326fcca62c617d8893b550f51eedb128249255c90eac23aaaf819e5c2f9dd125924cc55fe55774b4cd8ac2a0b72a8fc1fecb4a299f536f71aee8db5caf83c09acfc95ef58f2adaf72fcdebf5d8f442b66b978f120aaa920f3d2e813c61959724a17a32d2e756da80246e9064508dee89bf15f224f82eef3a1d30c992f69730dad107cbe74f8d8e775089545b6c6a150386db66ede2b48190f355abed9ae70227e8066139b55a5ff810404d11bf11ecba29d1516481629d25d7adcda575a3655f575f42037157742c8a4cf27b27ed20bf20df437502bca1818b38f8ec1dd6ace81b924c7a58c775e8a3db6cd194d1e586be2cf0712d190d4c2ce0bc49060732bb6bfae3fe28dc19c066dbe46ffb8df5841d60d0e90c4c8580b5ad29142dd4c9ee21d512a7ad4f7662b1be0bba687bf168bfd1c63965043848a77dd5422d7da57e58b87c3fd800d1a8e8b34b4891b6dc7115038a4fdde4ae14e202ea17cfbec917b36a008256f7ccdf5ee3b2f39e1627f0795359acfb3872c87816d769b0af7c98e881779ee40431d44edab4baa851c61ae5055e690ded5d01ee2bbe113b3b2acf49d29b6b1ad7e1c5ab6c7d401a866e97ca79d7071838d5f2509f4656fa4c96748bfbca62699ecf4cf4ce5ebf04b3084ec815669e6563a8c1d7d629149bf0ff055feced23c34b364c29343ee2ac83501391d9e4ace0ad374c6bebf38e748e323566303e13187e676e15ebc0dd8f3e73b4c9fad14622bf1856f430b64595f7e6d5b71ffc6bb68f42da279cb54be1032114072315de437dec9b432de84f6e3d86bcd09192be61deddf0d4996f0bb86388e7f7cedf0b15b79306c74c67ded764390fe0e1aab7b05a6d42ca33f8080480e6eea909330e2f7aa27c61fc3fe290703bba3d3eb23e0370ec40533ab78e943f707b6332ab17f25475dfbc2a37633e68eb95e444fbed94e7e58dced92196067df19667d8e5a616ace61ef32ca9dfd6b1ab1012fc4cbe5ef2b9f960e10397e3e9d555897d20c39058d9ec7dbe615557348ed95594fdb62bf4daf94a2b31967eb1f485e1c5d9cfd845dc2aa2d522d8caafaa391af31299073fa5488cb9fdb3a060495b07b894c075b6a43f1ce3903581f49ecb130cfe439e96eba2a3e6acdd32b6b706b5fa94fe275711cd132089d2218deb3da7549d6ea5b8658f76affe7d2054c445e9c002c0d76f2b09d090e27513eb1ef4e1dbcd07e72f77fae2abbc636bcde8566fb0cbb60335db22eff34725ddce6f08c3bbb0e15ea5dc543a6db7a75d82d8fa8c047818433cb993bd287de40b39bdc933e0718317c3fd5d930873c81a1ad901996f93d9d242fcc88fb8f0f055cf95a400675b3b9de38c4401a62048f5fda124646ba947f7d0ba3110374bb4465f82bdd7011c04c7c12c27c7317909a61d4f73dfb4fe0aa489f5c925093c6cd1a9803d587c30f4a6b90b87971f153c5f394675b3f1fb2bd2dd32f6e7d30ff80036d5d457d21bfe5e4503980d7aa295e9894366e07aaa63a64758c278cdfb47ce31bb17f3a21d584a5da43a025102355672a17d168b007d1cdc04d17b6a3e730c538a2b7528d41b3e3fde41f4906e71b486a0e7eeb321efc6ff856c2b98f0515b52a29f766c1c8145461003bfa43e2929ffe2762bd999f45e4b40208123bc26e5e43ea98b1ec2daf7202c8d2c2d3436479420b59812eb873aaac9c4aafbe74a2c532abae3432644343f85c6fb88c1f5713bbd3ead34768ab53f5fee414188b0b830b8df6217aaacb8e3100d6cc8c6dff3b7dbe6f082180e593da1e952fe95b77192b333b7dba292f28916c4a246a043eac33fe8163d2247a08dd7ffb440feebed0a4a5971ffb0591d8bd792d8eb6af3e2d58c5e527795ac56373180566ecffaca776399fbdd30d6578141a2eeaa637af8c2b79cdccd72f59d278746102429cde401abbb71282508bdc125918b791dded455ae91e40ae849d1e27efa2485c6ef665252b4f4ecf6c086b2a12953d7762307125858990a6b43d95613232348775fb6143c89cbc8473facc4dab7cf80a0dd7aaa29276a8edf9a492329fd1e0fa2472266880290651ad2b6b2a5ac6f665e521815aa996baefa29790f6274ba43ad9fc3e04480fa5e15d53092939a5bf8e8e633912b44e3db2fede97177ce36e9add219b1800fc662062fd1569b35f2c5c7afd14b944ca34ab474d5ee52a67d9237f5127f673f4f7179c02a2dd1d9a5d488f3e98f2eaec51a47a729d8bde8ca239fb1536493635f6f7c5d6d835ff9b2cf78761819ea424df9e8d55f4d4a66ac2a17352379ff0f190dc119aea8ae1e65256088062b765eac6c53f7e5efb80c649a721d15a92a0663ff08468ed47b8c75c71aaf78aab8322f9e509d07de751af64e1e4454c32a4bfbb763b6a17d911675267eced257915215cb46631cb19556220ef3ac3105d59f4f3ea91eda28641e8d8c8156cec34e77b5b255e0d23c1ed04460b8b9a5bbb4200687303f708a132119f86cd69ea5576f5a9352742071b215bd171ecdcb713ab763a5b5270e15ffa4fc6b20f56639661921b1e941da9b1a4530d910f403fc057790c98ee8b45ab44e2e3f88a831cfbe1574c6fc2fff891b131a2e854124a16e91c670c7ff8b3ae629b0910292682e4b83e6787dd59b0f6cb1f74786ea09cb4da21ef08cda5f7512edac4c6d01f86261154d3b5461a686a7635f64114d925085e75d5dc57183bd8290f7cf8e54f3a1087d7df9ab5e7ec055d1fb45c1e527db43b4106074a81f488163c45ac817060b6006196dad01dd29c3a23a9ef362cf7d12037b3ad40325414321cf3fedc701e096baa938887b01582288a4547be8a820774263ac72db92746672a7ba83c0ccfd134e2b71cb099683ae366a905823ebdb2f2238a1d2ff38fa2982955df59978f499a4464240fe4a38121eb39eb2425bef3bf77e3b849ff37f478aac8e2c2809ad9671258af308f816cf6e92dcde4b887550b8738a9b2dc29324760b0215b8d34fe6516cf65eb07103091c135e631b43e93d11e6eda74f2b36445e77bef758359d18f0edd36462c8b11b907fe342808160a2b187c7fb7e8e77604d38e858faddc1ff4a02a404ef4941a54db39680e1b9870567ecf95719e2deb907a173bcdaff121e91aef835d4f66aae2d8ddb8fec90061b7913da865ca98c4829c79a27f98e45dbbf6fcf32baf2dd4da7bc425d02712ce6fab9b27f16507ce5984fbe03f4926153a6e1b44a7ab9078e5cc0c6fed884f6490e068e286c86289a235de85f2a7a7d2d44ee7e05eeb1ce514b918809269e4d93e9e3ef601a27ae57a0ab35f58105a966f1aad31c56dc124f8cea6547d1e3becd9cf856ca63930b37e867ffb37df1e0e5aa4cc6febb9e75a8e18e2ad0e02a0e0749f6211d6cc671a705883353ca55aa025fc3cf2e82eb467c743787b2fa553b15a9ba7cbc18bc7dff4acf088c73504075167783f7fb08aa8b7a7cbd2a7c9c4b53c6bac9a4902a2f6a56deb529e80f040bece06acff2294e8fb14e285dc5a54cb43c813ad2944908575b7afbdd884ef21b68b5683c2ce251f0a78ed8e8ba4a132d391c3440b677746d45764a9651a379a963f46511fdd7a54de0dd11a32acfd6166306565c69c23a6b53b789dd05e4e4fc627cb38f05954acad4c1504b2ea88d80a87fc2812b30f4ef218b7e500b0635083d226b6b62734a36fbf5271d9ea17decca9d1caeaeca4284f7476e2514cef70cf80ec35f61e74142a279c0229e5820021e4c1ec537b6c8f83e3f83c448d5c4b24d8c372067a4d98f5ba43b75afb991a1819b476f210133d1280364b0bba8ebac3a33ad85b42f8ceb9126ae5315e9a1f8e9a112b1b98f2d20977d9176fdcc829cc0bc197a1693334c7eb441d16dd24c16f1d987b9fa286dad066f46819263be3da110e69d9a456599d73fbc7b5fe8f1a3a330b1e7caa4439f2890e6d3c57c4a5d30de212489f71cc120dcf62b50d9a9e1965d4b7ff3db90acef5499eba23ced67c45b3c2a53d47168f82f46756e0bff5e103d020f3992dd74926fe94ad974834cef78b27c74087d9bab63e980c138ec30c2efa181bbde58e286baf91bb000f423cd7ee79668b6599f45bd4546aa0b180512873630e6898164a08ad8ea9d1c8665f19c520d7606071389c749aa639669ae963ded514716fb793b9099bc7b5920824c55b79e4b3451c0bc8d4b35937a7587a491fe1118c067745390d92c44f5ce4c44af9fce4f2e380eaec14e72a10bd3cc93e1da8540873a38d4b1080c2617d4abd9c10709a541a4e2e58e2241d6cd7867f81eccff5a1745af69dfcb2fcc9f5d081b2627adef742fbd1be6ba636f11cf1018fa82b24eb96272a0d605df3a55e495c1002c3ea8426b41fb17b15f91eff12ae9ff2dd0735b2bcce2f40dcfc46027681378792ff28b8285036b57a395eca2bd6924b868f3e876c312f6"}}}}}}}, 0x0) 21:58:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 21:58:45 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 21:58:45 executing program 5: socketpair(0x15, 0x0, 0x0, &(0x7f0000000400)) 21:58:45 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x2, 0x0, 0x6, 0x0, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 21:58:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x4, 0x0) 21:58:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 21:58:45 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80842, 0x0) [ 3036.722891][T32212] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 3037.093543][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3037.102933][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.154935][T32212] usb 4-1: config 0 descriptor?? [ 3037.210913][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3038.392864][T32212] usb 4-1: USB disconnect, device number 122 21:58:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:47 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) inotify_init() 21:58:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) 21:58:47 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x100000, 0x0, 0xa0000}, 0x20) 21:58:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 21:58:47 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000000440)) 21:58:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) 21:58:48 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x8000000) [ 3038.987301][T14166] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? 21:58:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8971, &(0x7f0000000600)={'wpan1\x00'}) 21:58:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0xc0189436, 0x0) 21:58:48 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x100000}, 0x20) 21:58:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="f7ff000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) [ 3039.453479][T32212] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 3039.739755][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3039.763930][T14180] device bridge2 entered promiscuous mode [ 3039.822851][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3039.832226][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3039.854166][T32212] usb 4-1: config 0 descriptor?? [ 3039.909649][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3041.087553][T32212] usb 4-1: USB disconnect, device number 123 21:58:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8940, &(0x7f0000000600)={'wpan1\x00'}) 21:58:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)={0x48, r1, 0xe098d0f214a591e1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x48}}, 0x0) 21:58:50 executing program 5: socket(0x1d, 0x0, 0x9) 21:58:50 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x3, 0x0) 21:58:50 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_setup(0x75ea, &(0x7f0000000140)={0x0, 0x0, 0x31, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 21:58:50 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0), 0x10) 21:58:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8901, &(0x7f0000000600)={'wpan1\x00'}) 21:58:50 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7ff]}, 0x8}) 21:58:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}}, 0x0) 21:58:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1}, 0x48) 21:58:51 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000018d6"]) [ 3042.103164][ T4722] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 3042.348559][T14204] autofs4:pid:14204:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.402653184), cmd(0xc018937b) [ 3042.363038][T14204] autofs4:pid:14204:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 3042.488256][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3042.498868][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.561250][ T4722] usb 4-1: config 0 descriptor?? [ 3042.670336][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3043.783367][ T4722] usb 4-1: USB disconnect, device number 124 21:58:53 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:53 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100074, 0x8add8d18454d37f9}, 0x20) 21:58:53 executing program 4: pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x80000001}, 0x0, 0x0) 21:58:53 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x100000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="0400050900070000006174000404090a020002b6d2fc74", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 21:58:53 executing program 5: r0 = epoll_create1(0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x20000000}) 21:58:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) [ 3044.355147][T14211] FAT-fs (loop1): bogus number of reserved sectors [ 3044.365485][T14211] FAT-fs (loop1): Can't find a valid FAT filesystem 21:58:53 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000640)) 21:58:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @remote, 0x7808}}) 21:58:53 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x2, 0x0) 21:58:53 executing program 1: syz_clone(0x160200, 0x0, 0x0, 0x0, 0x0, 0x0) 21:58:53 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x6000, 0x0) 21:58:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}], 0x0, &(0x7f0000013c00)) [ 3044.900140][T24932] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 3045.273447][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3045.285289][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.340503][T24932] usb 4-1: config 0 descriptor?? [ 3045.392135][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3046.567648][T24932] usb 4-1: USB disconnect, device number 125 21:58:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000480)) 21:58:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, 0x0, 0x0) 21:58:56 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x200140, 0x0) 21:58:56 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 21:58:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8992, &(0x7f0000000600)={'wpan1\x00'}) 21:58:56 executing program 2: r0 = io_uring_setup(0x5e1a, &(0x7f00000012c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000001340), 0x1) 21:58:56 executing program 4: pselect6(0x40, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200), 0x0) 21:58:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:58:56 executing program 1: r0 = socket(0x25, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) 21:58:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001140)=[&(0x7f0000001100)={0x0, 0x0, 0x3, 0x5, 0x0, r0, 0x0}]) 21:58:56 executing program 2: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x80000060) [ 3047.642387][T24932] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 3048.032913][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3048.042277][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3048.073166][T24932] usb 4-1: config 0 descriptor?? [ 3048.118638][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3049.302757][T24932] usb 4-1: USB disconnect, device number 126 21:58:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:58:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:58:58 executing program 1: ioprio_set$uid(0x0, 0x0, 0x0) 21:58:58 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={0x0}) 21:58:58 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000001e00)) 21:58:58 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x10000002) 21:58:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8932, &(0x7f0000000600)={'wpan1\x00'}) 21:58:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180), 0x10) 21:58:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:58:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) bind$netlink(r0, &(0x7f0000000680), 0xc) 21:58:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a1, 0x0) 21:58:59 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x111000, 0x0) [ 3050.333040][T24932] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 3050.713640][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3050.723619][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3050.747529][T24932] usb 4-1: config 0 descriptor?? [ 3050.814976][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3051.971684][T24932] usb 4-1: USB disconnect, device number 127 21:59:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:59:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000005c0)={'ip6gre0\x00', 0x0}) 21:59:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:59:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 21:59:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:01 executing program 0: modify_ldt$read_default(0x2, &(0x7f0000000040)=""/223, 0xdf) 21:59:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 3052.552645][T14289] loop2: detected capacity change from 0 to 16 21:59:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x80086601, 0x0) 21:59:01 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:59:01 executing program 4: syz_clone(0x100051000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3052.637147][T14289] EXT4-fs (loop2): unsupported descriptor size 0 21:59:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8993, &(0x7f0000000600)={'wpan1\x00'}) [ 3053.012301][ T4722] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 3053.047501][T14301] loop2: detected capacity change from 0 to 16 [ 3053.168266][T14301] EXT4-fs (loop2): unsupported descriptor size 0 [ 3053.246472][T12326] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3053.383312][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3053.392838][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.462553][ T4722] usb 4-1: config 0 descriptor?? [ 3053.544885][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3054.922366][ T4722] gspca_stv06xx: I2C: Read error writing address: -71 [ 3054.947471][ T4722] usb 4-1: USB disconnect, device number 2 21:59:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:59:04 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x14b0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x48f, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 21:59:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8930, &(0x7f0000000600)={'wpan1\x00'}) 21:59:04 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:59:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) close(r0) 21:59:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) [ 3055.537019][T14310] loop2: detected capacity change from 0 to 16 21:59:04 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:59:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @ipv4}}) [ 3055.646747][T14310] EXT4-fs (loop2): unsupported descriptor size 0 21:59:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:05 executing program 1: set_mempolicy(0x0, &(0x7f0000000000)=0x2, 0x80) [ 3055.992575][ T4722] usb 4-1: new high-speed USB device number 3 using dummy_hcd 21:59:05 executing program 4: rt_sigprocmask(0x2, &(0x7f0000000000), &(0x7f0000000080), 0x8) [ 3056.063290][T14324] loop2: detected capacity change from 0 to 16 [ 3056.091862][T14324] EXT4-fs (loop2): unsupported descriptor size 0 [ 3056.354173][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3056.363650][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3056.418562][ T4722] usb 4-1: config 0 descriptor?? [ 3056.473924][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3057.872477][ T4722] gspca_stv06xx: I2C: Read error writing address: -71 [ 3057.896127][ T4722] usb 4-1: USB disconnect, device number 3 21:59:07 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 21:59:07 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:59:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:07 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 21:59:07 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 21:59:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) [ 3058.490772][T14338] loop2: detected capacity change from 0 to 16 21:59:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8927, &(0x7f0000000600)={'wpan1\x00'}) 21:59:07 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0xc93d0f22e154f484, 0xad, 0x1f, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x7, 0x80, 0x1, 0x7ff}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', r0, 0x4, 0x3f, 0x1, 0x0, 0x25, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, 0x10, 0x40, 0x80000000, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r0, 0x2f, 0x5, 0x1f, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x0, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', r2, 0x29, 0x3f, 0x0, 0x38e, 0x0, @local, @local, 0x8000, 0x0, 0x6}}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x0, 0x1ff, 0x281, r1, 0x1000, '\x00', r2}, 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0), 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "fa74ffc0086b60cdfe2292bfff719315"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "9b5fc5c83fc17bd8b580a08a04f15c92"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "354f9efdbfb52deaa5eeb165ab88e20e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9ce7ade3c203cc2498f6d2b5bc3d71fa"}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x4050) r4 = pidfd_getfd(r1, r1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8210000a}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8b07ed61be62"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendto$x25(r4, &(0x7f0000000ac0)="da3105362a2dcb39340ec7925fea25af72e101937e1b8c6f5be012b5be740c2fee9ee2c743e33d1316b58c54c37ca66f735156050b0230dffa43b320a4598809417d458e764d1534076cd176d5c33d206eb7c9ec88b7e6b0ac6d9560bc3b2f88cb5c0364bbfd6e784c0a0cab3abe169ae299d6809e352eaa540b699b2a048f74f15fb7113f2c0d2eab34d42cf0892005ab", 0x91, 0x40, &(0x7f0000000b80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 21:59:07 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) 21:59:07 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setns(r0, 0x0) 21:59:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3058.892392][ T2637] usb 4-1: new high-speed USB device number 4 using dummy_hcd 21:59:08 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8920, &(0x7f0000000600)={'wpan1\x00'}) [ 3059.006587][T14350] loop2: detected capacity change from 0 to 16 [ 3059.273275][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3059.282683][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3059.334716][ T2637] usb 4-1: config 0 descriptor?? [ 3059.383489][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3060.749240][ T2637] gspca_stv06xx: I2C: Read error writing address: -71 [ 3060.783211][ T2637] usb 4-1: USB disconnect, device number 4 21:59:10 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:59:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000012c0)}], 0x1}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 21:59:10 executing program 0: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/16) 21:59:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)={0x44, r1, 0xe098d0f214a591e1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}}, 0x0) 21:59:10 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8920, 0x0) [ 3061.368875][T14362] loop2: detected capacity change from 0 to 16 21:59:10 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 21:59:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x49}]}}, 0x0, 0x2a}, 0x20) 21:59:10 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x40049409, 0x0) 21:59:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) [ 3061.862939][ T2637] usb 4-1: new high-speed USB device number 5 using dummy_hcd 21:59:10 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) accept4$x25(r0, 0x0, 0x0, 0x0) [ 3061.978905][T14373] loop2: detected capacity change from 0 to 16 [ 3062.242916][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3062.252382][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3062.307530][ T2637] usb 4-1: config 0 descriptor?? [ 3062.370451][ T2637] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3063.742461][ T2637] gspca_stv06xx: I2C: Read error writing address: -71 [ 3063.776243][ T2637] usb 4-1: USB disconnect, device number 5 21:59:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:59:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x5452, 0x0) 21:59:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000600600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000020", 0x5d, 0x400}], 0x81, &(0x7f0000000180)) 21:59:13 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f0000000100), 0x0) 21:59:13 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240), 0x8}) [ 3064.347382][T14385] loop4: detected capacity change from 0 to 4 [ 3064.359550][T14386] loop2: detected capacity change from 0 to 16 [ 3064.400660][T14385] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 21:59:13 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "2bbb19e5631df896ba98674d0b4703551f0d03e2ed186049da15bffbdd1a3e02c2dda1e04e6fcd5ce9801d897649292487be6979a0b60bafc062c41c7373af99", "fd623e81b1486a5e6fab919c545f72d339f1538f1d1c4b68318117e2a6badf49"}) [ 3064.447754][T11927] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 21:59:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) set_mempolicy(0x0, &(0x7f0000000280), 0x1000) 21:59:13 executing program 1: keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:59:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8995, &(0x7f0000000600)={'wpan1\x00'}) 21:59:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x0, 0x0) [ 3064.863059][T32212] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 3064.882945][T14398] loop2: detected capacity change from 0 to 16 [ 3064.936275][T12326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3065.222890][T32212] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3065.232607][T32212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.297785][T32212] usb 4-1: config 0 descriptor?? [ 3065.381921][T32212] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3066.742576][T32212] gspca_stv06xx: I2C: Read error writing address: -71 [ 3066.776159][T32212] usb 4-1: USB disconnect, device number 6 21:59:16 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:59:16 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50040, 0x0) 21:59:16 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="02000000120000002200000060", 0xd, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x839, 0x1000}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x8000}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003", 0x3d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af302000400000000000000000000000200000010000000020000000100000013", 0x49, 0x11180}, {&(0x7f0000013200)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000002", 0x1b, 0x11580}], 0x0, &(0x7f0000013c00)) r1 = socket(0x10, 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r2, 0x0) 21:59:16 executing program 4: syz_io_uring_setup(0x14b0, &(0x7f0000000000)={0x0, 0x0, 0x7}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 21:59:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:16 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x0, 0x0) 21:59:16 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x68c00, 0x0) 21:59:16 executing program 4: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180), 0x10) 21:59:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 21:59:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:16 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x0, 0x0) [ 3067.773388][T24932] usb 4-1: new high-speed USB device number 7 using dummy_hcd 21:59:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x20c, 0x1}, 0x48) [ 3068.152997][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3068.162319][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3068.186910][T24932] usb 4-1: config 0 descriptor?? [ 3068.240732][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3069.622462][T24932] gspca_stv06xx: I2C: Read error writing address: -71 [ 3069.663107][T24932] usb 4-1: USB disconnect, device number 7 21:59:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:59:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 21:59:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x0, 0x0) 21:59:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000006060108"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) 21:59:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:19 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0) [ 3070.234556][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 21:59:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') write$tun(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0c0efb22dcd0"], 0x1004) 21:59:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:19 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d56157", 0x8, 0x0, 0x0, @private0, @empty, {[@hopopts]}}}}}, 0x0) 21:59:19 executing program 5: open$dir(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 21:59:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) [ 3070.710401][T14448] loop2: detected capacity change from 0 to 4 [ 3070.782228][T24932] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 3070.798414][T14448] EXT4-fs (loop2): Can't read superblock on 2nd try 21:59:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, 0x0) [ 3071.143306][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3071.152638][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3071.209171][T24932] usb 4-1: config 0 descriptor?? [ 3071.276703][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3072.812508][T24932] gspca_stv06xx: I2C: Read error writing address: -71 [ 3072.846041][T24932] usb 4-1: USB disconnect, device number 8 21:59:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:59:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) 21:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001480)={&(0x7f00000013c0), 0x0, &(0x7f0000001440)={0x0}}, 0x0) 21:59:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f0000000100)=0x8) 21:59:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:22 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/122) [ 3073.412402][T14464] loop2: detected capacity change from 0 to 4 [ 3073.451241][T14464] EXT4-fs (loop2): Can't read superblock on 2nd try 21:59:22 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0xad7a626fd6cf2321, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 21:59:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000280)={'batadv_slave_1\x00'}) 21:59:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00000001c0)="ae708cc8072524af1b4c23d17ae9a5fd13a59f3b90983881bbb01e9f72ea7268cdfc0840b4b6d7f3151389a754bc463bce15062b34b708a97aeafb8d585647f8e7964d85ea8798d09d368a6d4e82a5f07930a67c3e78d35950db6f77d117ba5c80a4723f8db97cff4bd650ad83a3f8bca42ac43c8684664645c82e62fdbba00bcd61833e6c16c6c164e6e5ad9b7f7c58618235f3378870a9dc99dab9b96ec820ad26323129f4ac163ade0130c503bc58753359b65a2a9a5a548497b02db1d782443bf204c91f8dfa764afad6b36d947d0fc3870b74361cc0", 0xd8) [ 3073.546658][T12326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3073.557047][T12326] Buffer I/O error on dev loop2, logical block 0, async page read 21:59:22 executing program 1: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5453, 0x0) 21:59:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3073.890523][T14471] batadv_slave_1: mtu less than device minimum [ 3073.902615][ T4722] usb 4-1: new high-speed USB device number 9 using dummy_hcd 21:59:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) [ 3073.990049][T14477] loop2: detected capacity change from 0 to 4 [ 3074.100620][T14477] EXT4-fs (loop2): Can't read superblock on 2nd try [ 3074.274589][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3074.284135][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.320117][ T4722] usb 4-1: config 0 descriptor?? [ 3074.370572][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3075.932562][ T4722] gspca_stv06xx: I2C: Read error writing address: -71 [ 3075.956788][ T4722] usb 4-1: USB disconnect, device number 9 21:59:25 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:59:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000280)={'batadv_slave_1\x00'}) 21:59:25 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 21:59:25 executing program 1: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5453, 0x0) 21:59:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:25 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000040)=@abs={0x1}, 0x6e, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)='V', 0x1}], 0x2}}], 0x1, 0x0) [ 3076.526220][T14487] loop2: detected capacity change from 0 to 4 21:59:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x700}, 0x0) 21:59:25 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8970, &(0x7f0000000000)={'veth0_vlan\x00'}) [ 3076.611403][T14487] EXT4-fs (loop2): Can't read superblock on 2nd try 21:59:25 executing program 1: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5453, 0x0) 21:59:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0010000700005ec90000001f4f0d00bc006400000404"]}) 21:59:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) [ 3077.043107][ T4722] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 3077.207268][T14502] loop2: detected capacity change from 0 to 4 [ 3077.281880][T14502] EXT4-fs (loop2): Can't read superblock on 2nd try [ 3077.404750][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3077.414620][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.483103][ T4722] usb 4-1: config 0 descriptor?? [ 3077.532406][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3079.072433][ T4722] gspca_stv06xx: I2C: Read error writing address: -71 [ 3079.097067][ T4722] usb 4-1: USB disconnect, device number 10 21:59:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21:59:28 executing program 0: syz_clone(0x300b233, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) 21:59:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) 21:59:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000280)={'batadv_slave_1\x00'}) 21:59:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000002c0)) 21:59:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {0x0}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3079.669561][T14512] loop2: detected capacity change from 0 to 4 21:59:28 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) 21:59:28 executing program 5: r0 = socket(0x29, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 3079.731759][T14512] EXT4-fs (loop2): Can't read superblock on 2nd try 21:59:28 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40086602, 0xfffffffffffffffe) 21:59:28 executing program 0: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 21:59:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5453, 0x0) [ 3080.182829][ T4722] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 3080.266746][T14526] loop2: detected capacity change from 0 to 16 [ 3080.341717][T14526] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3080.548096][ T4722] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3080.557449][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.624813][ T4722] usb 4-1: config 0 descriptor?? [ 3080.697389][ T4722] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3081.822631][ T4722] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 3082.116706][ T4722] STV06xx: probe of 4-1:0.0 failed with error -71 [ 3082.135046][ T4722] usb 4-1: USB disconnect, device number 11 21:59:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21:59:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="5ea5", 0x2}], 0x1}}, {{&(0x7f0000000300)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x90}}], 0x2, 0x0) 21:59:31 executing program 4: r0 = socket(0x2b, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 21:59:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:31 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5453, 0x0) 21:59:31 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x894c, 0x0) [ 3082.627620][T14537] loop2: detected capacity change from 0 to 16 21:59:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_DEBUG, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x43}]}, 0x34}}, 0x0) 21:59:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x13, &(0x7f00000001c0)="ae708cc8", 0x4) [ 3082.743054][T14537] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:31 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5453, 0x0) [ 3082.809858][T12326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3082.819435][T12326] Buffer I/O error on dev loop2, logical block 0, async page read [ 3082.828389][T12326] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3082.837839][T12326] Buffer I/O error on dev loop2, logical block 2, async page read [ 3082.846001][T12326] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 21:59:31 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003540)={'batadv_slave_1\x00'}) [ 3082.855409][T12326] Buffer I/O error on dev loop2, logical block 3, async page read 21:59:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:32 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) [ 3083.198835][T14553] loop2: detected capacity change from 0 to 16 [ 3083.222979][T24932] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 3083.289350][T14553] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3083.593054][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3083.602645][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.650141][T24932] usb 4-1: config 0 descriptor?? [ 3083.710192][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3084.832679][T24932] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 3085.122831][T24932] STV06xx: probe of 4-1:0.0 failed with error -71 [ 3085.160931][T24932] usb 4-1: USB disconnect, device number 12 21:59:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x11, 0x4c, 0x40, 0x46d, 0x840, 0xce99, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x2a, 0xfc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 21:59:34 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 21:59:34 executing program 5: r0 = socket(0x1e, 0x5, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 21:59:34 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5453, 0x0) 21:59:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8902, &(0x7f0000000840)={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 21:59:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x22, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) [ 3085.649445][T14566] loop2: detected capacity change from 0 to 16 21:59:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x32, &(0x7f0000000180)={0x0}}, 0x34020010) 21:59:34 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 3085.745409][T14566] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:34 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x401c5820, &(0x7f0000000000)={'veth0_vlan\x00'}) 21:59:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:35 executing program 5: r0 = socket(0x2, 0x6, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x11e, 0x3, 0x0, 0x4) [ 3086.203390][T24932] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3086.330221][T14582] loop2: detected capacity change from 0 to 16 [ 3086.409193][T14582] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3086.573855][T24932] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=ce.99 [ 3086.583291][T24932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.599294][T24932] usb 4-1: config 0 descriptor?? [ 3086.654417][T24932] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 3087.762586][T24932] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 3088.052711][T24932] STV06xx: probe of 4-1:0.0 failed with error -71 [ 3088.071477][T24932] usb 4-1: USB disconnect, device number 13 21:59:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2008841) 21:59:37 executing program 4: r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) 21:59:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 21:59:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) 21:59:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3088.581731][T14589] loop2: detected capacity change from 0 to 16 21:59:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x40000}, 0x0) 21:59:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x23, 0x0, 0xb3, &(0x7f0000000480)) [ 3088.670972][T14589] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000bac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 21:59:37 executing program 5: r0 = socket(0x1, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x63, 0x2, 0x6, 0x20, @local, @mcast1, 0x10, 0x8, 0x4d, 0x40}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0xde, 0x27, 0x9, 0x6, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf7, 0x700, 0x1, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0x8, 0x5, 0x8001, 0xd7, @mcast1, @mcast1, 0x80, 0x8000, 0x200, 0x6}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x8, 0xffffff6d, 0x42, @mcast2, @empty, 0x40, 0x80, 0x76, 0x6e8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x218, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) 21:59:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:38 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x268, &(0x7f0000000540)={[{0x261, 0x4e00, "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"}]}) 21:59:38 executing program 4: r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6a, 0x4, 0x0, 0x0) [ 3089.287128][T14604] loop2: detected capacity change from 0 to 16 21:59:38 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 21:59:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x25, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) [ 3089.353677][T14604] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') lseek(r2, 0x100000000000000, 0x0) poll(&(0x7f0000000280)=[{r0, 0x40cd}, {0xffffffffffffffff, 0x1350}], 0x2, 0x6) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) [ 3089.414268][T24932] usb 4-1: new high-speed USB device number 14 using dummy_hcd 21:59:38 executing program 4: r0 = socket(0x2, 0x3, 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 21:59:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1521}, 0x14}}, 0x0) 21:59:38 executing program 1: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 21:59:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB='\a'], 0x3c}}, 0x0) 21:59:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8901, &(0x7f0000000840)={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) [ 3089.881011][T14617] loop2: detected capacity change from 0 to 16 [ 3089.920431][T14617] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3089.943102][T24932] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3089.952590][T24932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3089.960741][T24932] usb 4-1: Product: syz [ 3089.965226][T24932] usb 4-1: Manufacturer: syz [ 3089.969986][T24932] usb 4-1: SerialNumber: syz 21:59:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3090.124973][T24932] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3090.366602][T14627] loop2: detected capacity change from 0 to 16 [ 3090.380224][T14627] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3090.778129][ T2637] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3091.196370][ T4722] usb 4-1: USB disconnect, device number 14 21:59:40 executing program 0: socket(0x25, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xbd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x5c, 0x48, 0x0, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @dev}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000c0) getuid() fcntl$getown(0xffffffffffffffff, 0x9) getegid() syz_clone(0x40000000, &(0x7f0000000780)="0eb40b6fb29fa8abbd8062b9c9eed5fd77cd177a9c1cc95d23b5066530acf97fb5cdf070d60fef287430386fc794c89cbaecb316b0cd6ca066ae2eba9557019ae09d65df63a89abaaf6ffe5485fd1906288b4e4a601072f1b494007702e61cee3cf69a56dd358d95a50eeeb0a0300e83df7d94d79c937d517a5eb8ea65581d843ddd5a0832390b3295a121f9b2190fea60b50e6eecb418bcedac757f77d6c4ecdd60", 0xa2, &(0x7f0000000840), &(0x7f0000000880), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x20040885) 21:59:40 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x541b, 0x0) 21:59:40 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x268, &(0x7f0000000540)={[{0x261, 0x4e00, "85d0c406a15ba16cca27fad91157f83d40d43d2f158ae2566b9235a45f7d3c63f929ba4a77ef0a530bd4150eccbeddc8d2b35b4ee35305148f8445b78ae869d33f6afa8157f95086ae76c0e9eb69af01303d7c416e801292527f2bd9dc0bc93cd5e72da7353acdd72fb138b92e01568e08a9ca2abb93c67481db70d13a00181da2f07485fd7725e7476978ab26edc41a5f779b931bafc8b2fd25ee972666d1162a0f944de0bd1c872660ad46b0b29a5f04d989eef8799a61235f254e2642cf724fc4f58dc0be388c403982739165a1258abb9ddfe10ddcc7dece29bed6cbb9a410174d60f9846b9ee5a710d42520e6e06988f03e099512679df1473e07caeaa29ef532174f3496eb9479106a8c5c83c7c65297ebd4b0a0b1ff6cf518e3e3f57880ab1ee66ad88baff75c84efa81e0bf4f4d644e88686f938496b167d859d024014c8384e0e0066858772c9753547c18ad42bcd02b9e5f13e9dfef83ad2707d27ba8191febfdcc5614ea08bfc677f3d2f8598ecc9bff434bd627140819aee678e10a5a1bfd465a4d9f9355c13b445dd185883d53af591bf4432277e7852e2588072766a092bf1fcd38d9cca0d764195eba7a9a0a3597384c15b9d876feb4a654ee8a4c1f6bb96895b4fbfa966f00a6e7effd30c4711e4054b47f7654907611c96d23102d8d73b7452ffffd9fe14324e74de761f8f25b578a36ee22c8686b3ea8b81da93498d9249d0a5f5952a817b7f3125d7abcc9acd214eedd8c014c1f131bc6346ce363b0b089d44417374be4b36ec742fc60bb5936ed2caa64a7265b3a626498ec97e66d22ae36de8dcf4253e456b6875e4bbc7ca8ea88d85f6dd3dc426465a"}]}) 21:59:40 executing program 4: bpf$OBJ_GET_PROG(0x1d, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 21:59:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdb", 0x31, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f00000001c0)="ae708cc8", 0x4) [ 3091.837052][T14636] loop2: detected capacity change from 0 to 16 [ 3091.852334][ T2637] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3091.859780][ T2637] ath9k_htc: Failed to initialize the device 21:59:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000006b40)=@bloom_filter, 0xa6) [ 3091.900227][T14636] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3091.968439][ T4722] usb 4-1: ath9k_htc: USB layer deinitialized [ 3092.025873][T12326] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3092.035489][T12326] Buffer I/O error on dev loop2, logical block 0, async page read [ 3092.043880][T12326] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3092.053250][T12326] Buffer I/O error on dev loop2, logical block 2, async page read [ 3092.061274][T12326] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 21:59:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000854) [ 3092.070671][T12326] Buffer I/O error on dev loop2, logical block 3, async page read 21:59:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x9, &(0x7f0000000040)="ae708c32", 0x4) 21:59:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdb", 0x31, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:41 executing program 0: socket(0x25, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xbd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x5c, 0x48, 0x0, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @dev}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x40000c0) getuid() fcntl$getown(0xffffffffffffffff, 0x9) getegid() syz_clone(0x40000000, &(0x7f0000000780)="0eb40b6fb29fa8abbd8062b9c9eed5fd77cd177a9c1cc95d23b5066530acf97fb5cdf070d60fef287430386fc794c89cbaecb316b0cd6ca066ae2eba9557019ae09d65df63a89abaaf6ffe5485fd1906288b4e4a601072f1b494007702e61cee3cf69a56dd358d95a50eeeb0a0300e83df7d94d79c937d517a5eb8ea65581d843ddd5a0832390b3295a121f9b2190fea60b50e6eecb418bcedac757f77d6c4ecdd60", 0xa2, &(0x7f0000000840), &(0x7f0000000880), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x20040885) 21:59:41 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x5421, &(0x7f0000000840)={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 21:59:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x1521, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) 21:59:41 executing program 1: r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6a, 0x2, 0x0, 0x3) [ 3092.515399][T14650] loop2: detected capacity change from 0 to 16 [ 3092.543675][ T4722] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 3092.631657][T14650] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 3093.094022][ T4722] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3093.103382][ T4722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.111552][ T4722] usb 4-1: Product: syz [ 3093.116018][ T4722] usb 4-1: Manufacturer: syz [ 3093.120767][ T4722] usb 4-1: SerialNumber: syz [ 3093.251042][ T4722] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3093.822548][T32212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3094.260541][T32210] usb 4-1: USB disconnect, device number 15 21:59:43 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x268, &(0x7f0000000540)={[{0x261, 0x4e00, "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"}]}) 21:59:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x2, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) 21:59:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdb", 0x31, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003a000b5bd25a80648c6394f90324fc60100002400a000a00053582c137153e370248098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 21:59:43 executing program 1: r0 = socket(0x2b, 0x1, 0x1) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000000)="21b75578", 0x4) 21:59:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f00000001c0)="ae708cc8", 0x4) [ 3094.885846][T14668] loop2: detected capacity change from 0 to 16 [ 3094.893329][T32212] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3094.900602][T32212] ath9k_htc: Failed to initialize the device [ 3094.933041][T32210] usb 4-1: ath9k_htc: USB layer deinitialized 21:59:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) 21:59:44 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8912, &(0x7f0000000000)={'veth0_vlan\x00'}) 21:59:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x4, &(0x7f0000000040)="c8000000", 0x4) [ 3094.976663][T14668] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 21:59:44 executing program 0: open$dir(&(0x7f0000000180)='./file0\x00', 0x42, 0x0) open$dir(&(0x7f00000005c0)='./file0/../file0\x00', 0x0, 0x0) 21:59:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000", 0x49, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894b, 0x0) [ 3095.463469][ T1195] ieee802154 phy0 wpan0: encryption failed: -22 [ 3095.470708][ T1195] ieee802154 phy1 wpan1: encryption failed: -22 [ 3095.480666][T14681] loop2: detected capacity change from 0 to 16 [ 3095.553171][T32210] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 3095.632847][T14681] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 3095.699968][T12326] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3096.073503][T32210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3096.083513][T32210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3096.091681][T32210] usb 4-1: Product: syz [ 3096.096145][T32210] usb 4-1: Manufacturer: syz [ 3096.100874][T32210] usb 4-1: SerialNumber: syz [ 3096.144372][T32210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3096.712413][T32212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3097.145417][T32210] usb 4-1: USB disconnect, device number 16 21:59:46 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x268, &(0x7f0000000540)={[{0x261, 0x4e00, "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"}]}) 21:59:46 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0xc6be69331204deb2, 0x0) 21:59:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) 21:59:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f00000003c0)=@abs, 0x6e, 0x0}, 0x0) 21:59:46 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8947, &(0x7f0000000000)={'veth0_vlan\x00'}) 21:59:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000", 0x49, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3097.765956][T14693] loop2: detected capacity change from 0 to 16 [ 3097.773270][T32212] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3097.780678][T32212] ath9k_htc: Failed to initialize the device 21:59:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 3097.815134][T32210] usb 4-1: ath9k_htc: USB layer deinitialized 21:59:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) 21:59:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x18, &(0x7f0000000080)={&(0x7f0000000040)="e9", 0x1}}, 0x0) [ 3097.888706][T14693] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 21:59:47 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)) 21:59:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000", 0x49, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$can_j1939(r0, 0x0, 0x0) [ 3098.392759][T32210] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 3098.447270][T14705] loop2: detected capacity change from 0 to 16 [ 3098.488034][T14705] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 3098.917470][T32210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3098.927122][T32210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.935573][T32210] usb 4-1: Product: syz [ 3098.941277][T32210] usb 4-1: Manufacturer: syz [ 3098.946786][T32210] usb 4-1: SerialNumber: syz [ 3099.004236][T32210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3099.572658][T32212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3100.006980][T32210] usb 4-1: USB disconnect, device number 17 21:59:49 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:59:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, 0x0) 21:59:49 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r0, &(0x7f0000000040)='P', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10) 21:59:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, &(0x7f0000000280)={'batadv_slave_1\x00'}) 21:59:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) [ 3100.591804][T14711] loop2: detected capacity change from 0 to 16 21:59:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x2, 0x0) [ 3100.652263][T32212] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3100.659825][T32212] ath9k_htc: Failed to initialize the device [ 3100.671249][T14711] EXT4-fs (loop2): unsupported inode size: 0 [ 3100.679847][T14711] EXT4-fs (loop2): blocksize: 4096 21:59:49 executing program 5: getitimer(0x1, &(0x7f00000006c0)) [ 3100.734433][T32210] usb 4-1: ath9k_htc: USB layer deinitialized 21:59:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x0, 0x0, 0x0, 0x408, 0x1}, 0x48) 21:59:49 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8930, &(0x7f0000000000)={'veth0_vlan\x00'}) 21:59:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3101.165630][T14733] loop2: detected capacity change from 0 to 16 21:59:50 executing program 4: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'veth0_vlan\x00'}) [ 3101.206811][T14733] EXT4-fs (loop2): unsupported inode size: 0 [ 3101.213739][T14733] EXT4-fs (loop2): blocksize: 4096 [ 3101.272886][T32210] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 3101.804966][T32210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3101.815239][T32210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3101.824027][T32210] usb 4-1: Product: syz [ 3101.828328][T32210] usb 4-1: Manufacturer: syz [ 3101.833165][T32210] usb 4-1: SerialNumber: syz [ 3101.884487][T32210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3102.462434][T32212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3102.671870][T32210] usb 4-1: USB disconnect, device number 18 21:59:52 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:59:52 executing program 5: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8943, &(0x7f0000000000)={'veth0_vlan\x00'}) 21:59:52 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)={[{0x2, 0x4e00, "0696"}]}) 21:59:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x11, &(0x7f00000001c0)="ae708cc8", 0x4) 21:59:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) 21:59:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 3103.280875][T14742] loop2: detected capacity change from 0 to 16 [ 3103.334444][T14742] EXT4-fs (loop2): unsupported inode size: 0 [ 3103.342514][T14742] EXT4-fs (loop2): blocksize: 4096 21:59:52 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="d669c7fe3b967379a9f2cbdcde4f2b1d", 0x10) 21:59:52 executing program 4: r0 = socket(0x1, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 21:59:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x17, &(0x7f00000001c0)="ae708cc8", 0x4) [ 3103.533389][T32212] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3103.540695][T32212] ath9k_htc: Failed to initialize the device [ 3103.542897][T24932] usb 2-1: new high-speed USB device number 65 using dummy_hcd 21:59:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b000000000400", 0x5b, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 3103.586205][T32210] usb 4-1: ath9k_htc: USB layer deinitialized 21:59:52 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGIFMTU(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00'}) 21:59:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000d80), 0x4) [ 3103.912553][T14755] loop2: detected capacity change from 0 to 16 [ 3103.948113][T14755] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 3103.982513][T32210] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 3104.112876][T24932] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3104.122566][T24932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.130724][T24932] usb 2-1: Product: syz [ 3104.135223][T24932] usb 2-1: Manufacturer: syz [ 3104.139967][T24932] usb 2-1: SerialNumber: syz [ 3104.324855][T24932] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3104.542968][T32210] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3104.552293][T32210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.560446][T32210] usb 4-1: Product: syz [ 3104.564864][T32210] usb 4-1: Manufacturer: syz [ 3104.569617][T32210] usb 4-1: SerialNumber: syz [ 3104.614885][T32210] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3104.942668][ T2637] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3105.172292][ C0] ===================================================== [ 3105.179338][ C0] BUG: KMSAN: uninit-value in skb_trim+0x1f8/0x280 [ 3105.185871][ C0] skb_trim+0x1f8/0x280 [ 3105.190072][ C0] ath9k_htc_rx_msg+0x63c/0xbc0 [ 3105.194999][ C0] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 3105.200326][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 3105.205720][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 3105.210934][ C0] dummy_timer+0x157a/0x51c0 [ 3105.215540][ C0] call_timer_fn+0x81/0x540 [ 3105.220056][ C0] expire_timers+0x2f5/0x6d0 [ 3105.224661][ C0] __run_timers+0x682/0xa80 [ 3105.229200][ C0] run_timer_softirq+0x71/0xe0 [ 3105.233998][ C0] __do_softirq+0x1ee/0x7c5 [ 3105.238539][ C0] invoke_softirq+0xa4/0x130 [ 3105.243180][ C0] irq_exit_rcu+0x76/0x130 [ 3105.247625][ C0] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 3105.253284][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3105.259281][ C0] acpi_idle_enter+0x747/0x820 [ 3105.264061][ C0] cpuidle_enter_state+0x9a8/0x1840 [ 3105.269289][ C0] cpuidle_enter+0xf4/0x180 [ 3105.273819][ C0] do_idle+0x68d/0x840 [ 3105.277929][ C0] cpu_startup_entry+0x3c/0x40 [ 3105.282730][ C0] rest_init+0x278/0x2e0 [ 3105.287009][ C0] arch_call_rest_init+0x13/0x15 [ 3105.292031][ C0] start_kernel+0xa9c/0xc4f [ 3105.297190][ C0] x86_64_start_reservations+0x2a/0x2c [ 3105.302681][ C0] x86_64_start_kernel+0xf5/0xfa [ 3105.307633][ C0] secondary_startup_64_no_verify+0xc4/0xcb [ 3105.313565][ C0] [ 3105.315891][ C0] Uninit was created at: [ 3105.320172][ C0] __kmalloc_node_track_caller+0xde3/0x14f0 [ 3105.326093][ C0] __alloc_skb+0x545/0xf90 [ 3105.330552][ C0] __netdev_alloc_skb+0x4b9/0x8c0 [ 3105.335615][ C0] ath9k_hif_usb_rx_cb+0xead/0x1df0 [ 3105.340834][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 3105.346218][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 3105.351428][ C0] dummy_timer+0x157a/0x51c0 [ 3105.356033][ C0] call_timer_fn+0x81/0x540 [ 3105.360568][ C0] expire_timers+0x2f5/0x6d0 [ 3105.365167][ C0] __run_timers+0x682/0xa80 [ 3105.369682][ C0] run_timer_softirq+0x71/0xe0 [ 3105.374458][ C0] __do_softirq+0x1ee/0x7c5 [ 3105.378236][T32212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3105.379001][ C0] [ 3105.379013][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.18.0-rc3-syzkaller #0 [ 3105.398246][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3105.408325][ C0] ===================================================== [ 3105.415266][ C0] Disabling lock debugging due to kernel taint [ 3105.421427][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 3105.427849][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.18.0-rc3-syzkaller #0 [ 3105.437255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3105.443299][T32210] usb 2-1: USB disconnect, device number 65 [ 3105.453212][ C0] Call Trace: [ 3105.456509][ C0] [ 3105.459351][ C0] dump_stack_lvl+0x1ff/0x28e [ 3105.464054][ C0] dump_stack+0x25/0x28 [ 3105.468225][ C0] panic+0x4fe/0xc73 [ 3105.472160][ C0] ? add_taint+0x181/0x210 [ 3105.476618][ C0] ? console_unlock+0x1ca0/0x2130 [ 3105.481700][ C0] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 3105.487548][ C0] kmsan_report+0x2e6/0x2f0 [ 3105.492066][ C0] ? x86_64_start_reservations+0x2a/0x2c [ 3105.497734][ C0] ? should_fail+0x75/0x9c0 [ 3105.502252][ C0] ? memcg_slab_post_alloc_hook+0x31/0xc80 [ 3105.508082][ C0] ? __msan_warning+0x94/0x110 [ 3105.512889][ C0] ? skb_trim+0x1f8/0x280 [ 3105.517242][ C0] ? ath9k_htc_rx_msg+0x63c/0xbc0 [ 3105.522299][ C0] ? ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 3105.527832][ C0] ? __usb_hcd_giveback_urb+0x6c6/0x930 [ 3105.533416][ C0] ? usb_hcd_giveback_urb+0x1e2/0x7c0 [ 3105.538823][ C0] ? dummy_timer+0x157a/0x51c0 [ 3105.543605][ C0] ? call_timer_fn+0x81/0x540 [ 3105.548292][ C0] ? expire_timers+0x2f5/0x6d0 [ 3105.553065][ C0] ? __run_timers+0x682/0xa80 [ 3105.557754][ C0] ? run_timer_softirq+0x71/0xe0 [ 3105.562701][ C0] ? __do_softirq+0x1ee/0x7c5 [ 3105.567395][ C0] ? invoke_softirq+0xa4/0x130 [ 3105.572184][ C0] ? irq_exit_rcu+0x76/0x130 [ 3105.576826][ C0] ? sysvec_apic_timer_interrupt+0xa2/0xc0 [ 3105.582690][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3105.588902][ C0] ? acpi_idle_enter+0x747/0x820 [ 3105.589442][ T4722] usb 4-1: USB disconnect, device number 19 [ 3105.599771][ C0] ? cpuidle_enter_state+0x9a8/0x1840 [ 3105.605192][ C0] ? cpuidle_enter+0xf4/0x180 [ 3105.609923][ C0] ? do_idle+0x68d/0x840 [ 3105.614205][ C0] ? cpu_startup_entry+0x3c/0x40 [ 3105.619211][ C0] ? rest_init+0x278/0x2e0 [ 3105.623687][ C0] ? arch_call_rest_init+0x13/0x15 [ 3105.628839][ C0] ? start_kernel+0xa9c/0xc4f [ 3105.633550][ C0] ? x86_64_start_reservations+0x2a/0x2c [ 3105.639226][ C0] ? x86_64_start_kernel+0xf5/0xfa [ 3105.644377][ C0] ? secondary_startup_64_no_verify+0xc4/0xcb [ 3105.650493][ C0] ? __kmalloc_node_track_caller+0xe64/0x14f0 [ 3105.656602][ C0] ? kmsan_get_metadata+0x33/0x220 [ 3105.661734][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 3105.667556][ C0] ? kmsan_get_metadata+0x33/0x220 [ 3105.672683][ C0] ? kmsan_get_metadata+0x33/0x220 [ 3105.677830][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 3105.683672][ C0] ? kmsan_get_metadata+0x33/0x220 [ 3105.688796][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 3105.694639][ C0] __msan_warning+0x94/0x110 [ 3105.699277][ C0] skb_trim+0x1f8/0x280 [ 3105.703471][ C0] ath9k_htc_rx_msg+0x63c/0xbc0 [ 3105.708352][ C0] ath9k_hif_usb_rx_cb+0x1721/0x1df0 [ 3105.713684][ C0] ? kmsan_get_metadata+0x33/0x220 [ 3105.718818][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 3105.724645][ C0] ? ath9k_hif_usb_alloc_urbs+0x1e50/0x1e50 [ 3105.730607][ C0] __usb_hcd_giveback_urb+0x6c6/0x930 [ 3105.736036][ C0] usb_hcd_giveback_urb+0x1e2/0x7c0 [ 3105.741268][ C0] dummy_timer+0x157a/0x51c0 [ 3105.745884][ C0] ? __mod_timer+0x267e/0x2ab0 [ 3105.750796][ C0] ? dummy_free_streams+0x940/0x940 [ 3105.756029][ C0] call_timer_fn+0x81/0x540 [ 3105.760571][ C0] expire_timers+0x2f5/0x6d0 [ 3105.765183][ C0] ? dummy_free_streams+0x940/0x940 [ 3105.770407][ C0] __run_timers+0x682/0xa80 [ 3105.774950][ C0] ? kmsan_get_metadata+0x33/0x220 [ 3105.780106][ C0] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 3105.785934][ C0] run_timer_softirq+0x71/0xe0 [ 3105.790712][ C0] ? migrate_timer_list+0x4f0/0x4f0 [ 3105.795926][ C0] __do_softirq+0x1ee/0x7c5 [ 3105.800464][ C0] invoke_softirq+0xa4/0x130 [ 3105.805086][ C0] irq_exit_rcu+0x76/0x130 [ 3105.809543][ C0] sysvec_apic_timer_interrupt+0xa2/0xc0 [ 3105.815207][ C0] [ 3105.818131][ C0] [ 3105.821064][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3105.827068][ C0] RIP: 0010:acpi_idle_enter+0x747/0x820 [ 3105.832665][ C0] Code: 83 e0 08 74 0c f7 d3 44 89 e0 21 d8 48 85 c0 74 66 4d 85 e4 75 6e 4c 8b 65 c0 eb 0c e8 62 ef d3 fa 0f 00 2d 75 6f 8a 09 fb f4 eb 60 44 89 f7 44 89 65 8c e8 8a 32 68 fb 44 8b 65 8c e9 a1 fa [ 3105.852300][ C0] RSP: 0018:ffffffff91403b48 EFLAGS: 00000246 [ 3105.858381][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3105.866360][ C0] RDX: ffffffff914310c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 3105.874347][ C0] RBP: ffffffff91403be0 R08: ffffffff86f5dce9 R09: ffffffff86f5db8b [ 3105.882348][ C0] R10: 0000000000000002 R11: ffffffff914310c0 R12: 0000000000000000 [ 3105.890326][ C0] R13: ffffffff91431c00 R14: 0000000000000000 R15: ffff888103029864 [ 3105.898312][ C0] ? acpi_idle_enter+0x5bb/0x820 [ 3105.903273][ C0] ? acpi_idle_enter+0x719/0x820 [ 3105.908258][ C0] ? acpi_idle_enter+0x719/0x820 [ 3105.913276][ C0] ? acpi_idle_lpi_enter+0x170/0x170 [ 3105.918591][ C0] cpuidle_enter_state+0x9a8/0x1840 [ 3105.923840][ C0] cpuidle_enter+0xf4/0x180 [ 3105.928396][ C0] do_idle+0x68d/0x840 [ 3105.932548][ C0] cpu_startup_entry+0x3c/0x40 [ 3105.937359][ C0] rest_init+0x278/0x2e0 [ 3105.941632][ C0] arch_call_rest_init+0x13/0x15 [ 3105.946592][ C0] start_kernel+0xa9c/0xc4f [ 3105.951124][ C0] x86_64_start_reservations+0x2a/0x2c [ 3105.956613][ C0] x86_64_start_kernel+0xf5/0xfa [ 3105.961606][ C0] secondary_startup_64_no_verify+0xc4/0xcb [ 3105.967678][ C0] [ 3105.970882][ C0] Kernel Offset: disabled [ 3105.975612][ C0] Rebooting in 86400 seconds..