USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.960617][T14841] usb 2-1: config 0 descriptor?? [ 1577.007817][T14841] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1577.213131][T14841] usb 2-1: USB disconnect, device number 69 03:42:48 executing program 1: syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0x4c, 0x11, 0x40, 0xf11, 0x2080, 0xfae0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xbd, 0xb8, 0xbc, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x9, 0x3}}, {}, {}]}}]}}]}}, 0x0) 03:42:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x33, 0x701, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 03:42:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002c9d7095000000001f000000080001003800000008000300", @ANYRES32=r4], 0x24}}, 0x0) 03:42:48 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) 03:42:48 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000440)={0xa, 0x100, 0x3, {0x0, 0x0, 0x8, 0x3e}}) 03:42:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 03:42:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mdio_bus', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) [ 1577.834706][T25482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:49 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x45}, {0x6}]}) 03:42:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002c9d7095000000001f000000080001003800000008000300", @ANYRES32=r4], 0x24}}, 0x0) 03:42:49 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mdio_bus', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 03:42:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1578.116118][ T24] audit: type=1326 audit(1655437369.173:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25494 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 03:42:49 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x45}, {0x6}]}) [ 1578.202692][T14841] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1578.275194][T25501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1578.394536][ T24] audit: type=1326 audit(1655437369.453:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25503 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 [ 1578.582925][T14841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1578.595864][T14841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1578.607444][T14841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1578.617348][T14841] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1578.628053][T14841] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1578.638783][T14841] usb 2-1: New USB device found, idVendor=0f11, idProduct=2080, bcdDevice=fa.e0 [ 1578.648098][T14841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.665674][T14841] usb 2-1: config 0 descriptor?? [ 1578.717990][T14841] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1578.919665][T14841] usb 2-1: USB disconnect, device number 70 03:42:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mdio_bus', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 03:42:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd8, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 03:42:50 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x45}, {0x6}]}) 03:42:50 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) 03:42:50 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) 03:42:50 executing program 1: syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb8, 0x4c, 0x11, 0x40, 0xf11, 0x2080, 0xfae0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xbd, 0xb8, 0xbc, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x9, 0x3}}, {}, {}]}}]}}]}}, 0x0) [ 1579.545248][ T24] audit: type=1326 audit(1655437370.603:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25507 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 03:42:50 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x45}, {0x6}]}) 03:42:50 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) 03:42:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mdio_bus', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 03:42:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd8, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) [ 1579.799156][ T24] audit: type=1326 audit(1655437370.853:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25519 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 03:42:50 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000104000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa00) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:42:51 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) [ 1579.941593][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1579.948385][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 03:42:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd8, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 03:42:51 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) [ 1579.982395][ T3549] usb 2-1: new high-speed USB device number 71 using dummy_hcd 03:42:51 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 03:42:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd8, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 03:42:51 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x8}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0xe, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000002840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 1580.383100][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1580.393218][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1580.404520][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1580.414414][ T3549] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1580.425070][ T3549] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1580.435812][ T3549] usb 2-1: New USB device found, idVendor=0f11, idProduct=2080, bcdDevice=fa.e0 [ 1580.445123][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.489890][ T3549] usb 2-1: config 0 descriptor?? [ 1580.558336][ T3549] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1580.759825][T14024] usb 2-1: USB disconnect, device number 71 03:42:52 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) 03:42:52 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000104000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa00) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:42:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:42:52 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 03:42:52 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x8}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0xe, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000002840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 03:42:52 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000104000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa00) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:42:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:42:52 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 03:42:52 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x8}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0xe, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000002840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 03:42:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f8, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 03:42:52 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 03:42:52 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 03:42:52 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000104000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa00) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 03:42:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f8, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 03:42:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:42:52 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:42:53 executing program 3: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index, 0x0, 0x8}, 0x1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0xe, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000002840)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 03:42:53 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 03:42:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:42:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0506617, &(0x7f0000000700)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:42:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f8, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 03:42:53 executing program 1: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 03:42:53 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 03:42:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0506617, &(0x7f0000000700)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:42:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) 03:42:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f8, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1582.586248][T25591] tipc: MTU too low for tipc bearer 03:42:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x44, 0x0, 0x0, 0x100000}, {0x1d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) [ 1582.737667][T25590] not chained 370000 origins [ 1582.742589][T25590] CPU: 1 PID: 25590 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1582.752793][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1582.762876][T25590] Call Trace: [ 1582.766179][T25590] [ 1582.769136][T25590] dump_stack_lvl+0x200/0x28c [ 1582.773873][T25590] dump_stack+0x29/0x2c [ 1582.778106][T25590] kmsan_internal_chain_origin+0x78/0x120 [ 1582.783891][T25590] ? inet_recvmsg+0x2a4/0x6d0 [ 1582.788634][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.793806][T25590] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1582.799679][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.804850][T25590] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1582.810728][T25590] ? should_fail+0x79/0x9c0 [ 1582.815282][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.820454][T25590] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1582.826754][T25590] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1582.832881][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.838048][T25590] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1582.843923][T25590] __msan_chain_origin+0xbd/0x140 [ 1582.849006][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1582.853764][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.858931][T25590] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1582.864792][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.869952][T25590] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1582.875816][T25590] do_recvmmsg+0x6b7/0x1200 [ 1582.880389][T25590] ? kmsan_get_metadata+0x33/0x220 [ 1582.885562][T25590] ? __x64_sys_recvmmsg+0x165/0x500 [ 1582.890819][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1582.895898][T25590] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1582.902210][T25590] do_syscall_64+0x3d/0xb0 [ 1582.906673][T25590] ? asm_exc_page_fault+0x8/0x30 [ 1582.911647][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1582.917577][T25590] RIP: 0033:0x7f55ed289109 [ 1582.922021][T25590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1582.941666][T25590] RSP: 002b:00007f55ee343168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1582.950116][T25590] RAX: ffffffffffffffda RBX: 00007f55ed39bf60 RCX: 00007f55ed289109 [ 1582.958116][T25590] RDX: 00000000000003a4 RSI: 0000000020004300 RDI: 0000000000000004 [ 1582.966116][T25590] RBP: 00007f55ed2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1582.974123][T25590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1582.982113][T25590] R13: 00007f55ed8cfb1f R14: 00007f55ee343300 R15: 0000000000022000 [ 1582.990128][T25590] [ 1582.997217][T25590] Uninit was stored to memory at: [ 1583.006516][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.011262][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.015921][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.021031][T25590] do_syscall_64+0x3d/0xb0 [ 1583.025619][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.031575][T25590] [ 1583.034008][T25590] Uninit was stored to memory at: [ 1583.039280][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.044113][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.048670][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.053838][T25590] do_syscall_64+0x3d/0xb0 [ 1583.058296][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.064372][T25590] [ 1583.066704][T25590] Uninit was stored to memory at: [ 1583.071794][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.076617][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.081203][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.086394][T25590] do_syscall_64+0x3d/0xb0 [ 1583.090887][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.096926][T25590] [ 1583.099258][T25590] Uninit was stored to memory at: [ 1583.104513][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.109242][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.113940][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.119014][T25590] do_syscall_64+0x3d/0xb0 [ 1583.123623][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.129580][T25590] [ 1583.132088][T25590] Uninit was stored to memory at: [ 1583.137182][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.141906][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.146569][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.151691][T25590] do_syscall_64+0x3d/0xb0 [ 1583.156316][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.162353][T25590] [ 1583.164688][T25590] Uninit was stored to memory at: [ 1583.169791][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.174684][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.179235][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.184464][T25590] do_syscall_64+0x3d/0xb0 [ 1583.188928][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.195019][T25590] [ 1583.197352][T25590] Uninit was stored to memory at: [ 1583.202590][T25590] ___sys_recvmsg+0x73b/0xb40 [ 1583.207341][T25590] do_recvmmsg+0x6b7/0x1200 [ 1583.211902][T25590] __x64_sys_recvmmsg+0x2b3/0x500 [ 1583.217137][T25590] do_syscall_64+0x3d/0xb0 [ 1583.222484][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1583.228420][T25590] [ 1583.230764][T25590] Local variable msg_sys created at: [ 1583.236206][T25590] do_recvmmsg+0xc9/0x1200 [ 1583.240678][T25590] __x64_sys_recvmmsg+0x2b3/0x500 03:42:55 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:42:55 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) 03:42:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x44, 0x0, 0x0, 0x100000}, {0x1d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 03:42:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0506617, &(0x7f0000000700)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:42:55 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf2, 0x0, &(0x7f00000000c0)) 03:42:55 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) [ 1584.058477][T25604] tipc: MTU too low for tipc bearer 03:42:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0506617, &(0x7f0000000700)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:42:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x44, 0x0, 0x0, 0x100000}, {0x1d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 03:42:55 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) 03:42:55 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:42:55 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) [ 1584.472464][T25620] tipc: MTU too low for tipc bearer 03:42:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x44, 0x0, 0x0, 0x100000}, {0x1d}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 03:42:57 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:42:57 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) 03:42:57 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 03:42:57 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 03:42:57 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf2, 0x0, &(0x7f00000000c0)) [ 1586.817837][T25637] tipc: MTU too low for tipc bearer 03:42:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:42:58 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 03:42:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r2}, {}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 03:42:58 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:42:58 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf2, 0x0, &(0x7f00000000c0)) 03:42:58 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xe) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 03:42:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r2}, {}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 03:43:01 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r2, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf2, 0x0, &(0x7f00000000c0)) 03:43:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:43:01 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 03:43:01 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:43:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r2}, {}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 03:43:02 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 03:43:02 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 03:43:02 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000024000bc6ccba90000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}, 0x1, 0x100000000000000}, 0x0) 03:43:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:43:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r2}, {}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 03:43:02 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 03:43:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) 03:43:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) 03:43:05 executing program 3: r0 = syz_io_uring_setup(0x28da, &(0x7f0000000080), &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x6377, 0x0, 0x0, 0x0, 0x0) 03:43:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) 03:43:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 03:43:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:43:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:43:05 executing program 3: r0 = syz_io_uring_setup(0x28da, &(0x7f0000000080), &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x6377, 0x0, 0x0, 0x0, 0x0) 03:43:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x4) 03:43:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) 03:43:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 03:43:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x4) 03:43:05 executing program 3: r0 = syz_io_uring_setup(0x28da, &(0x7f0000000080), &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x6377, 0x0, 0x0, 0x0, 0x0) 03:43:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 03:43:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x4) 03:43:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001800), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x41595556}}) 03:43:06 executing program 3: r0 = syz_io_uring_setup(0x28da, &(0x7f0000000080), &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x6377, 0x0, 0x0, 0x0, 0x0) 03:43:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:43:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) 03:43:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001800), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x41595556}}) 03:43:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x4) 03:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 03:43:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/227, 0xe3}}], 0x1, 0x0, &(0x7f0000005fc0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4202, 0x0, 0x0, 0xffffffffffff573c, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}}, 0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x309000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8918, &(0x7f0000000000)={'macvlan1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x4000000000000) 03:43:07 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b5db110422cf81674a9010203010902120001000200000904"], 0x0) 03:43:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001800), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x41595556}}) 03:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 03:43:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) [ 1596.580978][T25756] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 03:43:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001800), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x41595556}}) [ 1596.822252][T14841] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1597.082686][T14841] usb 5-1: Using ep0 maxpacket: 16 [ 1597.423140][T14841] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=a9.74 [ 1597.435273][T14841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.444016][T14841] usb 5-1: Product: syz [ 1597.448326][T14841] usb 5-1: Manufacturer: syz [ 1597.453204][T14841] usb 5-1: SerialNumber: syz [ 1597.523345][T14841] usb 5-1: config 0 descriptor?? [ 1597.842664][T14841] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1597.849898][T14841] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1597.856887][T14841] f81534a_ctrl: probe of 5-1:0.0 failed with error -5 [ 1597.973122][T14841] usb 5-1: USB disconnect, device number 122 03:43:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203030000000000000000e3000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) 03:43:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 03:43:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x142}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'netdevsim0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) open(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00', 0x600}) 03:43:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x4f8, 0x208, 0x0, 0xffffffff, 0x338, 0xf0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0, 0x2be, {0xba02000000000000}}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@dev, @icmp_id}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@multicast1, @port, @gre_key}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xc2}}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x589) 03:43:09 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b5db110422cf81674a9010203010902120001000200000904"], 0x0) [ 1598.617380][T25775] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 03:43:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x4f8, 0x208, 0x0, 0xffffffff, 0x338, 0xf0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0, 0x2be, {0xba02000000000000}}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@dev, @icmp_id}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@multicast1, @port, @gre_key}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xc2}}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x589) 03:43:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000300)="bd", 0x1) dup2(r0, r2) tee(r1, r0, 0x3, 0x0) close(r1) 03:43:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 03:43:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x142}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'netdevsim0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) open(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00', 0x600}) [ 1598.937376][T14841] usb 5-1: new high-speed USB device number 123 using dummy_hcd 03:43:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x4f8, 0x208, 0x0, 0xffffffff, 0x338, 0xf0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0, 0x2be, {0xba02000000000000}}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@dev, @icmp_id}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@multicast1, @port, @gre_key}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xc2}}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x589) [ 1599.027977][T25786] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:10 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000300)="bd", 0x1) dup2(r0, r2) tee(r1, r0, 0x3, 0x0) close(r1) 03:43:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 03:43:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) [ 1599.192631][T14841] usb 5-1: Using ep0 maxpacket: 16 03:43:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x142}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'netdevsim0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) open(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00', 0x600}) 03:43:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x4f8, 0x208, 0x0, 0xffffffff, 0x338, 0xf0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0, 0x2be, {0xba02000000000000}}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@dev, @icmp_id}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@multicast1, @port, @gre_key}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xc2}}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x589) [ 1599.378671][T25796] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1599.480427][T14841] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=a9.74 [ 1599.489949][T14841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.498243][T14841] usb 5-1: Product: syz [ 1599.502612][T14841] usb 5-1: Manufacturer: syz [ 1599.507347][T14841] usb 5-1: SerialNumber: syz [ 1599.531799][T14841] usb 5-1: config 0 descriptor?? [ 1599.872486][T14841] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1599.879800][T14841] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1599.890645][T14841] f81534a_ctrl: probe of 5-1:0.0 failed with error -5 [ 1599.928879][T14841] usb 5-1: USB disconnect, device number 123 03:43:11 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b5db110422cf81674a9010203010902120001000200000904"], 0x0) 03:43:11 executing program 0: r0 = syz_io_uring_setup(0x15f6, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x1a161}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000eea000/0x1000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000040), 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:43:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 03:43:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000300)="bd", 0x1) dup2(r0, r2) tee(r1, r0, 0x3, 0x0) close(r1) 03:43:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="0ec0", 0x2}], 0x1}, 0x8001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x700, 0x2, 0x0) 03:43:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x142}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'netdevsim0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) open(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00', 0x600}) 03:43:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000300)="bd", 0x1) dup2(r0, r2) tee(r1, r0, 0x3, 0x0) close(r1) 03:43:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 1600.933730][T14841] usb 5-1: new high-speed USB device number 124 using dummy_hcd 03:43:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2}}}}]}, 0x78}}, 0x0) 03:43:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="0ec0", 0x2}], 0x1}, 0x8001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x700, 0x2, 0x0) 03:43:12 executing program 2: socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 03:43:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x1c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="d1cb5ff7", 0x4}], 0x1}}], 0x1, 0x0) [ 1601.172569][T14841] usb 5-1: Using ep0 maxpacket: 16 [ 1601.222477][T25825] device vlan1 entered promiscuous mode [ 1601.228166][T25825] device ip6gretap0 entered promiscuous mode [ 1601.250897][T25827] not chained 380000 origins [ 1601.255853][T25827] CPU: 0 PID: 25827 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1601.266050][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.276143][T25827] Call Trace: [ 1601.279439][T25827] [ 1601.282383][T25827] dump_stack_lvl+0x200/0x28c [ 1601.287116][T25827] dump_stack+0x29/0x2c [ 1601.291322][T25827] kmsan_internal_chain_origin+0x78/0x120 [ 1601.297108][T25827] ? unix_stream_recvmsg+0x35e/0x3b0 [ 1601.302464][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.307638][T25827] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1601.313515][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.318683][T25827] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1601.324556][T25827] ? should_fail+0x79/0x9c0 [ 1601.329101][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.334273][T25827] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1601.340573][T25827] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1601.346698][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.351860][T25827] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1601.357728][T25827] __msan_chain_origin+0xbd/0x140 [ 1601.362800][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.367547][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.372705][T25827] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1601.378564][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.383726][T25827] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1601.389588][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.394165][T25827] ? kmsan_get_metadata+0x33/0x220 [ 1601.399342][T25827] ? __x64_sys_recvmmsg+0x165/0x500 [ 1601.404597][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.409678][T25827] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1601.415987][T25827] do_syscall_64+0x3d/0xb0 [ 1601.420450][T25827] ? asm_exc_page_fault+0x8/0x30 [ 1601.425432][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.431370][T25827] RIP: 0033:0x7fc7e3c89109 [ 1601.435807][T25827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1601.455453][T25827] RSP: 002b:00007fc7e4d26168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1601.463901][T25827] RAX: ffffffffffffffda RBX: 00007fc7e3d9bf60 RCX: 00007fc7e3c89109 [ 1601.471898][T25827] RDX: 0000000000000700 RSI: 0000000020001140 RDI: 0000000000000004 [ 1601.479892][T25827] RBP: 00007fc7e3ce305d R08: 0000000000000000 R09: 0000000000000000 [ 1601.487896][T25827] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1601.495890][T25827] R13: 00007fc7e42cfb1f R14: 00007fc7e4d26300 R15: 0000000000022000 [ 1601.503902][T25827] [ 1601.510727][T25827] Uninit was stored to memory at: [ 1601.516351][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.521123][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.525839][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.531102][T25827] do_syscall_64+0x3d/0xb0 [ 1601.536000][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.542051][T25827] [ 1601.544475][T25827] Uninit was stored to memory at: [ 1601.549566][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.554598][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.559163][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.564458][T25827] do_syscall_64+0x3d/0xb0 [ 1601.569023][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.575358][T25827] [ 1601.577711][T25827] Uninit was stored to memory at: [ 1601.582981][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.587726][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.592516][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.597597][T25827] do_syscall_64+0x3d/0xb0 [ 1601.602242][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.609400][T25827] [ 1601.611745][T25827] Uninit was stored to memory at: [ 1601.612930][T25825] device ip6gretap0 left promiscuous mode [ 1601.617042][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.627578][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.632275][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.637374][T25827] do_syscall_64+0x3d/0xb0 [ 1601.641842][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.647992][T25827] [ 1601.650326][T25827] Uninit was stored to memory at: [ 1601.655708][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.660467][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.665232][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.670318][T25827] do_syscall_64+0x3d/0xb0 [ 1601.674955][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.680896][T25827] [ 1601.683425][T25827] Uninit was stored to memory at: [ 1601.688522][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.693438][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.693501][T14841] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=a9.74 [ 1601.697995][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.707692][T14841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.712280][T25827] do_syscall_64+0x3d/0xb0 [ 1601.712337][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.720343][T14841] usb 5-1: Product: syz [ 1601.724868][T25827] [ 1601.724880][T25827] Uninit was stored to memory at: [ 1601.724958][T25827] ___sys_recvmsg+0x73b/0xb40 [ 1601.733727][T14841] usb 5-1: Manufacturer: syz [ 1601.735076][T25827] do_recvmmsg+0x6b7/0x1200 [ 1601.737330][T14841] usb 5-1: SerialNumber: syz [ 1601.742434][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1601.742499][T25827] do_syscall_64+0x3d/0xb0 [ 1601.742546][T25827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1601.742595][T25827] [ 1601.742605][T25827] Local variable msg_sys created at: [ 1601.742620][T25827] do_recvmmsg+0xc9/0x1200 [ 1601.742672][T25827] __x64_sys_recvmmsg+0x2b3/0x500 [ 1602.171566][T14841] usb 5-1: config 0 descriptor?? [ 1602.512479][T14841] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1602.519802][T14841] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1602.526669][T14841] f81534a_ctrl: probe of 5-1:0.0 failed with error -5 [ 1602.567786][T14841] usb 5-1: USB disconnect, device number 124 03:43:14 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b5db110422cf81674a9010203010902120001000200000904"], 0x0) 03:43:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2}}}}]}, 0x78}}, 0x0) 03:43:14 executing program 0: r0 = syz_io_uring_setup(0x15f6, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x1a161}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000eea000/0x1000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000040), 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 03:43:14 executing program 3: munlock(&(0x7f0000009000/0x1000)=nil, 0xffffffffdfff6fff) 03:43:14 executing program 2: socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 03:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="0ec0", 0x2}], 0x1}, 0x8001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x700, 0x2, 0x0) 03:43:14 executing program 3: munlock(&(0x7f0000009000/0x1000)=nil, 0xffffffffdfff6fff) 03:43:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2}}}}]}, 0x78}}, 0x0) [ 1603.372924][T14024] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1603.445969][T25842] device vlan1 entered promiscuous mode [ 1603.451662][T25842] device ip6gretap0 entered promiscuous mode 03:43:14 executing program 3: munlock(&(0x7f0000009000/0x1000)=nil, 0xffffffffdfff6fff) [ 1603.589272][T25842] device ip6gretap0 left promiscuous mode [ 1603.612603][T14024] usb 5-1: Using ep0 maxpacket: 16 03:43:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="0ec0", 0x2}], 0x1}, 0x8001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x700, 0x2, 0x0) 03:43:15 executing program 3: munlock(&(0x7f0000009000/0x1000)=nil, 0xffffffffdfff6fff) [ 1603.894391][T14024] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=a9.74 [ 1603.903906][T14024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.912392][T14024] usb 5-1: Product: syz [ 1603.916694][T14024] usb 5-1: Manufacturer: syz [ 1603.921415][T14024] usb 5-1: SerialNumber: syz 03:43:15 executing program 0: r0 = syz_io_uring_setup(0x15f6, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x1a161}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000eea000/0x1000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000040), 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 1604.064643][T14024] usb 5-1: config 0 descriptor?? [ 1604.383268][T14024] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1604.393567][T14024] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1604.400245][T14024] f81534a_ctrl: probe of 5-1:0.0 failed with error -5 [ 1604.533474][T14024] usb 5-1: USB disconnect, device number 125 03:43:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000140)="53000000fcffffff770003001ffe20000080040800000000000000200000000000000000", 0x24}], 0x2) 03:43:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2}}}}]}, 0x78}}, 0x0) 03:43:15 executing program 2: socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 03:43:15 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000000)=@ethtool_sset_info}) 03:43:15 executing program 0: r0 = syz_io_uring_setup(0x15f6, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x1a161}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000eea000/0x1000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000040), 0x0) socket$inet(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 1604.974203][T25864] device vlan1 entered promiscuous mode [ 1604.979875][T25864] device ip6gretap0 entered promiscuous mode [ 1605.230159][T25864] device ip6gretap0 left promiscuous mode 03:43:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) 03:43:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000140)="53000000fcffffff770003001ffe20000080040800000000000000200000000000000000", 0x24}], 0x2) 03:43:16 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x7b, 0xea, 0x60, 0x8, 0xc45, 0x60fb, 0x66b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x80, 0xb4}}]}}]}}, 0x0) 03:43:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) 03:43:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000140)="53000000fcffffff770003001ffe20000080040800000000000000200000000000000000", 0x24}], 0x2) 03:43:16 executing program 2: socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8cfe7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 03:43:16 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x9) [ 1605.803004][T14024] usb 6-1: new high-speed USB device number 101 using dummy_hcd 03:43:16 executing program 0: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) [ 1605.890934][T25891] device vlan1 entered promiscuous mode [ 1605.896806][T25891] device ip6gretap0 entered promiscuous mode [ 1605.974675][T25891] device ip6gretap0 left promiscuous mode 03:43:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000140)="53000000fcffffff770003001ffe20000080040800000000000000200000000000000000", 0x24}], 0x2) [ 1606.042213][T14024] usb 6-1: Using ep0 maxpacket: 8 03:43:17 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x9) 03:43:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) 03:43:17 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0xfffffffffffffffe) [ 1606.343414][T14024] usb 6-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice=66.b4 [ 1606.353047][T14024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.361209][T14024] usb 6-1: Product: syz [ 1606.365795][T14024] usb 6-1: Manufacturer: syz [ 1606.370531][T14024] usb 6-1: SerialNumber: syz [ 1606.493016][T14024] usb 6-1: config 0 descriptor?? [ 1606.511211][T25904] bridge0: port 3(erspan0) entered blocking state [ 1606.519034][T25904] bridge0: port 3(erspan0) entered disabled state [ 1606.528141][T25904] device erspan0 entered promiscuous mode [ 1606.535418][T25904] bridge0: port 3(erspan0) entered blocking state [ 1606.542409][T25904] bridge0: port 3(erspan0) entered forwarding state [ 1606.600080][T14024] gspca_main: sonixj-2.14.0 probing 0c45:60fb 03:43:17 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0xfffffffffffffffe) [ 1606.762636][T14024] gspca_sonixj: reg_w1 err -71 [ 1606.767732][T14024] sonixj: probe of 6-1:0.0 failed with error -71 [ 1606.840762][T14024] usb 6-1: USB disconnect, device number 101 03:43:18 executing program 2: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x12d4) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {}, 0x0, 0x0, &(0x7f0000000000)="96bec7efbed4f55dd165", 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020023ff160000000500000002000020d3cf"]) 03:43:18 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0xfffffffffffffffe) 03:43:18 executing program 4: r0 = socket(0x28, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x28, 0x1, 0x0, 0x98204e7f0000) 03:43:18 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x9) 03:43:18 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x7b, 0xea, 0x60, 0x8, 0xc45, 0x60fb, 0x66b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x80, 0xb4}}]}}]}}, 0x0) 03:43:18 executing program 0: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:18 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0xfffffffffffffffe) 03:43:18 executing program 2: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x12d4) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {}, 0x0, 0x0, &(0x7f0000000000)="96bec7efbed4f55dd165", 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020023ff160000000500000002000020d3cf"]) 03:43:18 executing program 4: r0 = socket(0x28, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x28, 0x1, 0x0, 0x98204e7f0000) 03:43:18 executing program 2: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x12d4) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {}, 0x0, 0x0, &(0x7f0000000000)="96bec7efbed4f55dd165", 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020023ff160000000500000002000020d3cf"]) 03:43:18 executing program 4: r0 = socket(0x28, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x28, 0x1, 0x0, 0x98204e7f0000) [ 1607.822657][T14024] usb 6-1: new high-speed USB device number 102 using dummy_hcd 03:43:18 executing program 3: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:19 executing program 2: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x12d4) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141281) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {}, 0x0, 0x0, &(0x7f0000000000)="96bec7efbed4f55dd165", 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020023ff160000000500000002000020d3cf"]) 03:43:19 executing program 4: r0 = socket(0x28, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x28, 0x1, 0x0, 0x98204e7f0000) [ 1608.122788][T14024] usb 6-1: Using ep0 maxpacket: 8 03:43:19 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x9) 03:43:19 executing program 2: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) [ 1608.405370][T14024] usb 6-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice=66.b4 [ 1608.414929][T14024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.423251][T14024] usb 6-1: Product: syz [ 1608.427565][T14024] usb 6-1: Manufacturer: syz [ 1608.432657][T14024] usb 6-1: SerialNumber: syz [ 1608.654016][T14024] usb 6-1: config 0 descriptor?? [ 1608.708722][T14024] gspca_main: sonixj-2.14.0 probing 0c45:60fb [ 1608.768124][T25949] bridge0: port 3(erspan0) entered blocking state [ 1608.775294][T25949] bridge0: port 3(erspan0) entered disabled state [ 1608.784598][T25949] device erspan0 entered promiscuous mode [ 1608.794303][T25949] bridge0: port 3(erspan0) entered blocking state [ 1608.801137][T25949] bridge0: port 3(erspan0) entered forwarding state [ 1608.812565][T25953] bridge0: port 3(erspan0) entered blocking state [ 1608.819514][T25953] bridge0: port 3(erspan0) entered disabled state [ 1608.828718][T25953] device erspan0 entered promiscuous mode [ 1608.836099][T25953] bridge0: port 3(erspan0) entered blocking state [ 1608.843005][T25953] bridge0: port 3(erspan0) entered forwarding state [ 1608.930568][T14024] gspca_sonixj: reg_w1 err -71 [ 1608.935843][T14024] sonixj: probe of 6-1:0.0 failed with error -71 [ 1608.965157][T14024] usb 6-1: USB disconnect, device number 102 03:43:20 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x7b, 0xea, 0x60, 0x8, 0xc45, 0x60fb, 0x66b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x80, 0xb4}}]}}]}}, 0x0) 03:43:20 executing program 4: io_setup(0x401, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000140)=0x0) io_destroy(r0) io_destroy(r0) 03:43:20 executing program 0: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:20 executing program 2: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:43:20 executing program 3: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x37, 0x0, "d369a9c34aca811a22bdc5790fc3caf69a4c21b9140009ec80827ca732590d458252cbc265e8733272d3f2c88ae57b56c98dd2f6ec5c88a329866436650c7413531a693e2c59a428983b6c2175d21ce2"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 03:43:20 executing program 4: io_setup(0x401, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000140)=0x0) io_destroy(r0) io_destroy(r0) 03:43:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x37, 0x0, "d369a9c34aca811a22bdc5790fc3caf69a4c21b9140009ec80827ca732590d458252cbc265e8733272d3f2c88ae57b56c98dd2f6ec5c88a329866436650c7413531a693e2c59a428983b6c2175d21ce2"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 1609.932692][T10571] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1610.183290][T10571] usb 6-1: Using ep0 maxpacket: 8 03:43:21 executing program 4: io_setup(0x401, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000140)=0x0) io_destroy(r0) io_destroy(r0) 03:43:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x37, 0x0, "d369a9c34aca811a22bdc5790fc3caf69a4c21b9140009ec80827ca732590d458252cbc265e8733272d3f2c88ae57b56c98dd2f6ec5c88a329866436650c7413531a693e2c59a428983b6c2175d21ce2"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 1610.483121][T10571] usb 6-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice=66.b4 [ 1610.492557][T10571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.500733][T10571] usb 6-1: Product: syz [ 1610.505243][T10571] usb 6-1: Manufacturer: syz [ 1610.509988][T10571] usb 6-1: SerialNumber: syz [ 1610.608092][T10571] usb 6-1: config 0 descriptor?? 03:43:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x37, 0x0, "d369a9c34aca811a22bdc5790fc3caf69a4c21b9140009ec80827ca732590d458252cbc265e8733272d3f2c88ae57b56c98dd2f6ec5c88a329866436650c7413531a693e2c59a428983b6c2175d21ce2"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 1610.667934][T10571] gspca_main: sonixj-2.14.0 probing 0c45:60fb [ 1610.873036][T10571] gspca_sonixj: reg_w1 err -71 [ 1610.878068][T10571] sonixj: probe of 6-1:0.0 failed with error -71 [ 1610.945550][T10571] usb 6-1: USB disconnect, device number 103 03:43:22 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x7b, 0xea, 0x60, 0x8, 0xc45, 0x60fb, 0x66b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x80, 0xb4}}]}}]}}, 0x0) 03:43:22 executing program 2: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:22 executing program 3: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:22 executing program 4: io_setup(0x401, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000140)=0x0) io_destroy(r0) io_destroy(r0) 03:43:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:43:22 executing program 0: r0 = syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000008c0)={0x50, 0x0, r1, {0x7, 0x24, 0x6, 0xa8000, 0x7, 0x40, 0x0, 0x40000}}, 0x50) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0xffffffffffffff86) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x6, 0x3, 0xffff}) syz_clone3(&(0x7f0000000780)={0x104000000, &(0x7f0000000100), &(0x7f00000004c0), &(0x7f0000000500), {0xc}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/255, &(0x7f0000000700)=[r2, r3, r0, r2, r2, r0, r0], 0x7, {r4}}, 0x58) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8) r5 = gettid() r6 = socket(0x10, 0x400000000080803, 0x0) io_pgetevents(0x0, 0x2, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x4]}, 0x8}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="040000000000000005000000000000005fbb00000000000000000000000000000000000073adbc461f12aa27ee039572e004008b8789a284b539ad8c9f4a51cc906ed37291543b2fe74a3ebf0b7e41c96812694c900e1a7260d12301c20941af8247f000e0067ac758d2cf69280b0adf758044a36373e4b91557f60e779da03c591480620dd8"]}) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000040)={0xd6ba, 0x0, 0x0, 0x4c51000, 0x0, "25eb556d8c26e9032d622509db5b6f62e21193"}) rt_sigtimedwait(&(0x7f00000001c0)={[0xdc0]}, &(0x7f0000000240), &(0x7f00000002c0), 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 03:43:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:43:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:43:23 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) keyctl$restrict_keyring(0x12, 0x0, 0x0, 0x0) [ 1611.930682][T14841] usb 6-1: new high-speed USB device number 104 using dummy_hcd 03:43:23 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) keyctl$restrict_keyring(0x12, 0x0, 0x0, 0x0) 03:43:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2}, @alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:43:23 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) keyctl$restrict_keyring(0x12, 0x0, 0x0, 0x0) [ 1612.330269][T14841] usb 6-1: Using ep0 maxpacket: 8 03:43:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 1612.653974][T14841] usb 6-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice=66.b4 [ 1612.663334][T14841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.671500][T14841] usb 6-1: Product: syz [ 1612.675960][T14841] usb 6-1: Manufacturer: syz [ 1612.680702][T14841] usb 6-1: SerialNumber: syz [ 1612.825830][T14841] usb 6-1: config 0 descriptor?? [ 1612.875915][T14841] gspca_main: sonixj-2.14.0 probing 0c45:60fb [ 1613.075820][T14841] gspca_sonixj: reg_w1 err -71 [ 1613.080809][T14841] sonixj: probe of 6-1:0.0 failed with error -71 [ 1613.091590][T14841] usb 6-1: USB disconnect, device number 104 03:43:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) 03:43:24 executing program 4: keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) keyctl$restrict_keyring(0x12, 0x0, 0x0, 0x0) 03:43:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)=@newpolicy={0xec4, 0x13, 0xc43d78f844e4b8c1, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@lifetime_val={0x24}, @algo_crypt={0xd61, 0x2, {{'lrw-twofish-3way\x00'}, 0x68c8, "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"}}, @tmpl={0x84, 0x5, [{{@in=@private, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1}, {{@in=@dev}, 0x0, @in6=@dev}]}]}, 0xec4}}, 0x0) 03:43:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:43:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:43:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)=@newpolicy={0xec4, 0x13, 0xc43d78f844e4b8c1, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@lifetime_val={0x24}, @algo_crypt={0xd61, 0x2, {{'lrw-twofish-3way\x00'}, 0x68c8, "6d2f82756037010b4d2325e9f58721a4b7dddd1cf58ecf6fc34fd3276b4e52e381a8fdaa7890fcd495e414ba4ca5f73c398d6aa5c298c10cdcafdb19e5ee273cf7750bb52045bb694b1facad46bbe3249b526691faf3c09d63dd26f422609e01576a8847c88d3d08b17bb760fedca56b5111164cf84d38595342d9faca1daced81e51254edbaa63fb7e39836e3b124fc534d7c97c1d97b95316f00becf37d74a30f18e21547905480c9365c380da6f5b73fc7d84b67ab10aa70a17f136b03ddfdb980883dbbe2b2920574c6271339dc363c3331539076e093c67f60e223becbe009746a6fc15c22243d2e9ad2894ee33aad8457a6dd690b1d5f30824031a65ebd3932028031eb10fad660eb497b149f90dbccfb27debe6b4c9aaf3405aa5efff8b2a420ae64d5de681418080d65a12d4923e766a8677359b73c2b3da5fd39492c83537bc863a07a1fc4a37e320b4f2140c4a9120b9fc42fd8edd3a2f9703aa204936d6cbdd8b4a431054aaf9acf9e500b38ca96b8e77946942c58564d9b61ca6ffcfd525c8fa8d72e72f0bddf590ad5208cf71e3c32ecf9d093ade805e7a54650c3f78e0d772f3fa0d547ca4c784baf7cffe32f169bd319a1e51583415d871e44cff66e3cf5990b3bec1bb2f54b42d7f84b5e852b584ee2a4da4dcdb590b922d4ba4953ac01671f5849ab4719ca70ddbfe474375fd0e0949dc40bbf798ce6c751908f9be73284428081680cfe907f1b3fe6f40024735ce6ea7836a2df9b388e84ab8af14a946bfd62a5542e7ae4796c912c5e63a3ed8f57f2b543b8cc23dc30d10c8264ae83c2eb0ea3a2ab6966fb15ba67b45a4eb09af68d8fd568406459ee79b2eef49fe9618378c5d4dfe7f6b2b156f9c1a5774db36c3d40d293fddc1b332a6aac9e3f9f91d570203d16113b5d00294260ccc9ad4b0adb7a29956fca23df30eecf30d362ac0c990c9d8415e846f76c6aa40cf4b5fbabc884a5d2d207fe4b8d37469830380092ae856abab76efd23c01f8ece7c8e2ad7d6d64017313edea1130a9b13b9f321caf03c9390e4a5ac9616423efc62c4f38c66e8ae2c104026a8eb66da3b7717b92bfc38d4a6201afbfa22657e8d5577bab1fe7343fa127356a63e69c32a4c57a4b0776158da794efc1aa243777afacefecbbecec7886b997f5bf5e01f9911383536355bc061180cb62c62875b4fadd0964322b46dd7aba755b5161c11c50c39c195ccee7b2ed364f3eaba36ae06d35e48cce41c99da7a36f6ab63fb1a600a5d2c2b704548dff9af09546701c15505a2f95901ab6de3134a8489938cbe29306a275acf8ee85ba0befb64a3da00cad0978284ea6cbf8704409a5b8ad9c761e5b95a3cb1032440927057f98457de0f8fb97ea4cef6dbb84629395d20bd71eb4e2555495ad7842f703c03ff3e0a28d756a6ecf25eae14a98899ec0d6a1dc04c639204a451beb2eaa45befa3a8ce85f0d74a316b1111cc2603a73930ba18c3ab82ee72f6ae0a363945554b5ef19cfeee728b4a598ac52f1e6b2261d0c4fb97137c61ee47055a15e152dc773f306a176f79f1ccd2fa310b39edfec417ccf2134282221326d48ab16c682ab2959c0a1c46385910bc0e03914aca1be388963527f8ab3f4bbb62483b04cee3a387d7c26ebe5d99b51ed0c40e1503c5dfda60e9666fe8d89e080cb446c75a0e503ee157d70ce9cb60a4eaa4e738cffaad652782de90b4322b0b4acf3c977db6f1e1455c7f4eafa915877d83a7222cada3725430e60daf219efec50c0cfcf3a329529f918a4b88992030c3847cf3f9941b34edfd4afc4a02a3760eec223a81df8158681e2ac4f26f3dcd29078194f2a2a77ceaef66c638d7ecdfe08bcc8384f0daf95048e74039bdc659dcee21676813f65e598cb0b8d194564a961e5603b407c8882303e7f9e87fee453fa3862621797552961aa58e87232db91bdee72b54d9f8e67d3b7f68ba3cd4119a1884c3dfcec0f0ff5f2458aded19981d56de0a89c62695cc0da022b7aa0b0a8a29d0969e4e4f9977f75b7fe692cffa6aa1251611b9f23251bc3904307f2bb0bc6a9bf26eafc3665b031ce336bb513d9355c3ca9db3e5579bc599a1fefcff1f17e4a9b6ce646265ec5fbc89abcbc495dcc66390c126021a842585fbb0a87a909a22ef2037782cccef4dcabaa5bff3ffcfbbe01db2e4f8bf1eeec81b93dc879de2be73267b1c2b0c322f70007e5c9beed04d4814054a9c3bc4b8fee68fb77cabc6bc3412acce4dfbb6c23425758f071131611d91a36c1334588264075fbe96a4e8bab7ee9da00522a5f3404b9bfd144ff3f29e3a82111d1e212c1b7cd8b89e3ecae7f4fad28e1ab30f40e702573d33722bc051ca191b1db29dfe3d96e3e836a45d3c65393cfb96fb8163212c9495f11064901b2373157d70038f66c571a365ca2b65db0314e5d1bf24650ebb365395f04b6dc7041d21455f706759554c47675f3134a08dd6714c7b8cc3ce44d14ab8516752e968aa71fc4a385b0e0a2350eaa559daeb676690f062f3fa857ed45ea07754d0fa392e97b71e14b65aa4761664de94b6e4a018504a2041ed8f7c5dbed7d25d1f55e0ed7d0d6058b17e2fb993e41972776f64c1b8ccf06cbac69e181ea641a7d3a927b5d620ed9d311dcccea5cfcaa5be550725bea0f121a37eae0a033495911ae549be1f087d30c0b842aac9ba3d47758790dd298e080d87e24454b5987eba976b89ebbd776afbe68110b01d9700604d37b9de1f69774f4ea71f3b3a32ccb2b3402940f583b9ff696d099c72eb20b3eac63c9ce868139aa91dedf89f6c81a912913fdd0ddc4efaa3ddb8f80a753018c021a6c2de2244be94cff74255df74b60f4f3a44001008793cf685eedc45328b37f987b6ea0b644183caf4ace34b45467ef10d2158c3421f3d0ec5fdf00f5ce1e0c358e8f20e022131a9816fd743f83468717263fda7e5f5eb9f7e794cddffb6f6d624554fe2f9b0153b19fb7e29c0dfd608208ac3d35115f2a6774682af306496f3e0afe293003b57ebb37cb2958f7685dc17ec2e7dcfdff9cf127a9191175404415065d92b3a9cb0c1269f46b88a8a8f899cdb795542b10c7e61fbc1616f3afeaa185839b93e3d301bf6afb73ed8617ddedb25e143c1f9a35606ddc1ef2b877a91ddd9562829ad4fb4f8f6a0b2df235225485dba06893fa625e6a686ce3769ae0d63bdf7b0db8fd1a624e62b8c91006a9a4ab1e090b032fc3bb3ef78fa2cb12b487c25eb08987b9a598b2bdfeca9d2965b6c9d346a0ef3a8593ca802bd76bb218215e2f317f7b72de8352993f05abab8e4e08a2e417e797a86e5c8c726752ce4f657f3a06934b9b42060b931ae3552a06f7096519a1b44ce2f5e6ad623739bcb3d7ec17b26c75bab617ad5e70a04115ed0227856f0b7c685fc51d9d1813a366b25e468364ebfad5f661cc15263fe36b9f52edd634973ec0ad07aba83502b01f9e44b55a879c20d77aa867092031932e4266ffe7917466f4afcda9c6f81d486c6850499c6e275757851501a025770366cc45ffce1c358ea65826fc2b0ee0a44aaf30271dbc2141111fa7aac4f0588ced537f9113552bcb210f256428d3becee3824685a2b57dffeda1b66ee1245bcdff1448961b9a4f801d8a3f60e06f0a094a8d2f855054804b8019641dc049466895c515f23bf42129b84d6e04f9ec4091aec5fb7beac7300033961c93ba84bec747c1f3a551ab8d271a03a0f4cfe64396d4c28166aa1b5dbaf1fc2cc41b62b79f29cc86ed784cd46045a716f7ad543fbf4d4b7c914866911e960075c291dd9c592b7ed89e2101c349b4cdddf69af522ae51cde4a7eb06d09992724dbf8d4443ff11a1a7f0f28f99fb4a3fee1192fd277a036c4c6429189429e4b0e698d31ef086a62de61230796b26f348adbf1ab29bb8477cd2a39182c6019bb8c21a67b4b6889de47ce8bd72e73109f83e64c0dae308768fd8032ca639fecde07921d81559d6abd035a59adfd518344e0e928dd3dcd3771df2ddf89e35237b6d1aaa6c0d61402b9e120b26b8e87aaede84cd8aa3c0e1496b01f46e48ad1e441b9cd1bcc3fc473b52711985f5ca60c3eed414235d50d07cce845255da3247ccb3b55df39a846dfb8b8c54ad4a0a983f84c6adf0f2ce69b74a2ab51ff8c7463fc9f9af36b300ea4e9b531f765f4d28c7055d0235f8306aa890fd12a4b44d5e8cbbd971107d4a4cb548d749c08cba1c7b8858fb21c57effb3e88ebfa35f0454b262ec4c82333e3d680694d2d43494fc88aacd84b1e6c2563804746a771b74411d5415c3e65a9606579a69a8d729c087afa3646a506964d527e29ad7705992bfabb15f4885f16e114add8fc095a00d2eae9a8a3f19f65ec63efc19d213c2362c9e4a4fafb805d7439fbc1dc0fa2e2ddb7ca26945b84cb2acef5cc62fc748f9fa99558848bde22fad34c9fd154a9a14ce2e6980c4a47b91dfc981d813cf03f5b8017a5db6397f2b50e4c4659feca55b4fd10c1396cdfea3cefa2a10dca92d968bb1a4a187f6375b632fcd3c65aa40228093adcef29b7745aeb049173de6a76080bfe4991887f3c0772b9c364ebd32db67622cafa95853131f0f36af81651e47ab19a84c735dd864a8cc39d6060b77bf4afbc85a9aa1c1f28c88e497dc3865522bfdfe6d5e614e3fedb911a2956c3a65280efb4aafb80808e7d33b4155aea7c353f9fc63f2af94697677cfd38d670955dcff9ac3f245ad6c727e"}}, @tmpl={0x84, 0x5, [{{@in=@private, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1}, {{@in=@dev}, 0x0, @in6=@dev}]}]}, 0xec4}}, 0x0) 03:43:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) 03:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}}, 0x0) 03:43:25 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f000001a200)=""/102390, &(0x7f00000001c0)=0x18ff6) 03:43:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)=@newpolicy={0xec4, 0x13, 0xc43d78f844e4b8c1, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@lifetime_val={0x24}, @algo_crypt={0xd61, 0x2, {{'lrw-twofish-3way\x00'}, 0x68c8, "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"}}, @tmpl={0x84, 0x5, [{{@in=@private, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1}, {{@in=@dev}, 0x0, @in6=@dev}]}]}, 0xec4}}, 0x0) 03:43:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x5}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}}, 0x0) 03:43:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:25 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f000001a200)=""/102390, &(0x7f00000001c0)=0x18ff6) 03:43:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) 03:43:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)=@newpolicy={0xec4, 0x13, 0xc43d78f844e4b8c1, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@lifetime_val={0x24}, @algo_crypt={0xd61, 0x2, {{'lrw-twofish-3way\x00'}, 0x68c8, "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"}}, @tmpl={0x84, 0x5, [{{@in=@private, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1}, {{@in=@dev}, 0x0, @in6=@dev}]}]}, 0xec4}}, 0x0) 03:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}}, 0x0) 03:43:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x121041) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) 03:43:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in6=@private2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) 03:43:25 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f000001a200)=""/102390, &(0x7f00000001c0)=0x18ff6) 03:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x44}}, 0x0) 03:43:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f3ff000008000100627066002000020008000300dfffffff050004"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:43:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x121041) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) [ 1614.876433][T26088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:43:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:26 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f000001a200)=""/102390, &(0x7f00000001c0)=0x18ff6) 03:43:26 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x7) [ 1615.098121][T26093] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:43:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x121041) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) 03:43:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000280)=""/175, 0xaf}, &(0x7f0000000240)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1}}, @rdma_args={0x48, 0x114, 0x9, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 03:43:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f3ff000008000100627066002000020008000300dfffffff050004"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:43:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x121041) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0x373) 03:43:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000280)=""/175, 0xaf}, &(0x7f0000000240)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1}}, @rdma_args={0x48, 0x114, 0x9, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 1615.477488][T26109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1615.614029][T26113] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:43:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f3ff000008000100627066002000020008000300dfffffff050004"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:43:26 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000280)=""/175, 0xaf}, &(0x7f0000000240)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1}}, @rdma_args={0x48, 0x114, 0x9, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 03:43:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:26 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x7) 03:43:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)="ae", 0x1}]) [ 1615.993884][T26128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:43:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000280)=""/175, 0xaf}, &(0x7f0000000240)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1}}, @rdma_args={0x48, 0x114, 0x9, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 03:43:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)="ae", 0x1}]) [ 1616.253882][T26135] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:43:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1, 0x48, 0x0) 03:43:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000080)={0x88, {{0x29, 0x0, 0x5000000, @mcast1}}}, 0x88) 03:43:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) 03:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f3ff000008000100627066002000020008000300dfffffff050004"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:43:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)="ae", 0x1}]) 03:43:27 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x7) [ 1616.654938][T26149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:43:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000080)={0x88, {{0x29, 0x0, 0x5000000, @mcast1}}}, 0x88) 03:43:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) 03:43:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) [ 1616.879115][T26158] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:43:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)="ae", 0x1}]) 03:43:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) 03:43:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000080)={0x88, {{0x29, 0x0, 0x5000000, @mcast1}}}, 0x88) 03:43:28 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) 03:43:28 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x7) 03:43:28 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) 03:43:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) 03:43:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000080)={0x88, {{0x29, 0x0, 0x5000000, @mcast1}}}, 0x88) 03:43:28 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) 03:43:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) 03:43:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) 03:43:28 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) 03:43:28 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:s}z 000000000000000040'], 0x2d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 03:43:28 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) dup3(r1, r2, 0x0) 03:43:28 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) 03:43:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x4, 0x12}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x10}}, 0x90}}, 0x0) 03:43:28 executing program 3: r0 = memfd_create(&(0x7f0000001740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x06\xb2\x00\x00\x00\x00\x00\x00\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\xbc+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\xa0\xc9+\xad\x81Ks\xba\xbbC6\x05\x13\xb5\xe086EzD\x1a\xd5\x01\x00\x00\x00\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\x98[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9G>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\xb5\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;FA\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) close(r0) 03:43:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x4000000000000081) 03:43:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 03:43:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000a00)="9c1537ba14149b42a44812166c47", 0xe}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000000000002900000008000000e08cdb115c1536f708a180210312826f651bccdf62cdf412802a22b91ed63fa1d54d9a2a4b5e3edb3193ebbba2a3f022028a7bb8ca8c849ad7590000000000000801"], 0x158}}], 0x1, 0x0) 03:43:33 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 03:43:33 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) [ 1622.384205][T26255] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 03:43:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000a00)="9c1537ba14149b42a44812166c47", 0xe}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000000000002900000008000000e08cdb115c1536f708a180210312826f651bccdf62cdf412802a22b91ed63fa1d54d9a2a4b5e3edb3193ebbba2a3f022028a7bb8ca8c849ad7590000000000000801"], 0x158}}], 0x1, 0x0) 03:43:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 03:43:33 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) 03:43:33 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) 03:43:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) close(r0) 03:43:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000a00)="9c1537ba14149b42a44812166c47", 0xe}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000000000002900000008000000e08cdb115c1536f708a180210312826f651bccdf62cdf412802a22b91ed63fa1d54d9a2a4b5e3edb3193ebbba2a3f022028a7bb8ca8c849ad7590000000000000801"], 0x158}}], 0x1, 0x0) 03:43:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 1622.903429][T26268] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 03:43:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x4000000000000081) 03:43:34 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) 03:43:34 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) 03:43:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000a00)="9c1537ba14149b42a44812166c47", 0xe}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000000000002900000008000000e08cdb115c1536f708a180210312826f651bccdf62cdf412802a22b91ed63fa1d54d9a2a4b5e3edb3193ebbba2a3f022028a7bb8ca8c849ad7590000000000000801"], 0x158}}], 0x1, 0x0) 03:43:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 03:43:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) close(r0) 03:43:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) 03:43:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="86", 0x1}], 0x1, &(0x7f0000000840)=[@iv={0x28, 0x117, 0x2, 0x10, "dbb04932b68f739be8a843c38eadddc8"}, @op={0x18, 0x117, 0x3, 0x1}], 0x40}], 0x1, 0x0) [ 1623.384562][T26282] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 03:43:34 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) 03:43:34 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) 03:43:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) close(r0) 03:43:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) [ 1623.792419][T26296] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 03:43:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x4000000000000081) 03:43:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="86", 0x1}], 0x1, &(0x7f0000000840)=[@iv={0x28, 0x117, 0x2, 0x10, "dbb04932b68f739be8a843c38eadddc8"}, @op={0x18, 0x117, 0x3, 0x1}], 0x40}], 0x1, 0x0) 03:43:35 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 03:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)={0x40, r1, 0x901, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x40}}, 0x0) 03:43:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) 03:43:35 executing program 5: syz_usb_connect$uac1(0x0, 0xe8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "27263b4198c1"}, @processing_unit={0x7}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x0, 0x0, "970f"}, @extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x20, "90734496"}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "20be2e6879a55f1f"}, @as_header={0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "f17d7a505138c699"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "8de9aaeaf02785"}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:43:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="86", 0x1}], 0x1, &(0x7f0000000840)=[@iv={0x28, 0x117, 0x2, 0x10, "dbb04932b68f739be8a843c38eadddc8"}, @op={0x18, 0x117, 0x3, 0x1}], 0x40}], 0x1, 0x0) 03:43:35 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 03:43:35 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) 03:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)={0x40, r1, 0x901, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x40}}, 0x0) [ 1624.503685][ T3556] usb 6-1: new high-speed USB device number 105 using dummy_hcd 03:43:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="86", 0x1}], 0x1, &(0x7f0000000840)=[@iv={0x28, 0x117, 0x2, 0x10, "dbb04932b68f739be8a843c38eadddc8"}, @op={0x18, 0x117, 0x3, 0x1}], 0x40}], 0x1, 0x0) 03:43:35 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) [ 1624.748195][ T3556] usb 6-1: Using ep0 maxpacket: 8 [ 1624.880812][ T3556] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.890748][ T3556] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 03:43:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x4000000000000081) 03:43:36 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 03:43:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)={0x40, r1, 0x901, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x40}}, 0x0) 03:43:36 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x9}, &(0x7f0000000280)={0x2}, 0x0, 0x0) 03:43:36 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) [ 1625.063522][ T3556] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1625.075035][ T3556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.083657][ T3556] usb 6-1: Product: syz [ 1625.087960][ T3556] usb 6-1: Manufacturer: syz [ 1625.092770][ T3556] usb 6-1: SerialNumber: syz [ 1625.494536][ T3556] usb 6-1: 0:2 : does not exist [ 1625.538805][ T3556] usb 6-1: USB disconnect, device number 105 [ 1625.631150][T26309] udevd[26309]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 03:43:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r1, @ANYBLOB='n'], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20803}}, 0x20}}, 0x0) 03:43:37 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 03:43:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)={0x40, r1, 0x901, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x40}}, 0x0) 03:43:37 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000200)=""/185) 03:43:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x9}, &(0x7f0000000280)={0x2}, 0x0, 0x0) 03:43:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01efc12f1794e67fba55f7590800", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 03:43:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) 03:43:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x9}, &(0x7f0000000280)={0x2}, 0x0, 0x0) 03:43:37 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 03:43:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01efc12f1794e67fba55f7590800", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 03:43:37 executing program 2: unshare(0x600) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4604, &(0x7f0000000380)) 03:43:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) 03:43:37 executing program 2: unshare(0x600) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4604, &(0x7f0000000380)) 03:43:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) 03:43:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r1, @ANYBLOB='n'], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20803}}, 0x20}}, 0x0) 03:43:37 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x9}, &(0x7f0000000280)={0x2}, 0x0, 0x0) 03:43:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01efc12f1794e67fba55f7590800", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 03:43:37 executing program 3: r0 = add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 03:43:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) 03:43:37 executing program 2: unshare(0x600) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4604, &(0x7f0000000380)) 03:43:38 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) write$hidraw(r0, &(0x7f00000000c0)='T', 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000012c0)) 03:43:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01efc12f1794e67fba55f7590800", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 03:43:38 executing program 3: r0 = add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 03:43:38 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x4) renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) 03:43:38 executing program 2: unshare(0x600) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4604, &(0x7f0000000380)) 03:43:38 executing program 3: r0 = add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 03:43:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r1, @ANYBLOB='n'], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20803}}, 0x20}}, 0x0) 03:43:38 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) write$hidraw(r0, &(0x7f00000000c0)='T', 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000012c0)) 03:43:38 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 03:43:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x83, 0xffffffbd}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 03:43:38 executing program 3: r0 = add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000027c0), &(0x7f0000002800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 03:43:38 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x4) renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) [ 1627.583531][T26400] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:38 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) write$hidraw(r0, &(0x7f00000000c0)='T', 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000012c0)) 03:43:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) 03:43:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x83, 0xffffffbd}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 03:43:38 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x4) renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) 03:43:39 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) write$hidraw(r0, &(0x7f00000000c0)='T', 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000012c0)) [ 1628.027949][T26413] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 03:43:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r1, @ANYBLOB='n'], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20803}}, 0x20}}, 0x0) 03:43:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x83, 0xffffffbd}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 03:43:39 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x4) renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) 03:43:39 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 03:43:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) 03:43:39 executing program 0: r0 = gettid() r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x400009) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000040)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x2f7, @time}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x40a85321, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc08c5334, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "833e699f225e1ef1", "b7c1ab31789bc2fa441e9aef7d73f58d6dae45daf16c093303803cea9a05c5fe"}) tkill(r0, 0x7) 03:43:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x83, 0xffffffbd}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) [ 1628.496039][T26430] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 03:43:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, 0x24}}, 0x0) 03:43:39 executing program 2: unshare(0x2000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800004, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x0) 03:43:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) [ 1628.734713][T26440] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:39 executing program 2: unshare(0x2000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800004, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x0) [ 1628.816561][T26441] openvswitch: netlink: Either Ethernet header or EtherType is required. 03:43:39 executing program 0: r0 = gettid() r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x400009) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000040)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x2f7, @time}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x40a85321, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc08c5334, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "833e699f225e1ef1", "b7c1ab31789bc2fa441e9aef7d73f58d6dae45daf16c093303803cea9a05c5fe"}) tkill(r0, 0x7) 03:43:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, 0x24}}, 0x0) 03:43:40 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1c0, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x158, 0x2e8, 0x2e8, 0x158, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x6020000}}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x2}) [ 1628.979718][T26444] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 03:43:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) [ 1629.175042][T26452] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1629.269288][T26456] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 03:43:40 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 03:43:40 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1c0, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x158, 0x2e8, 0x2e8, 0x158, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x6020000}}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x2}) 03:43:40 executing program 0: r0 = gettid() r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x400009) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000040)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x2f7, @time}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x40a85321, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc08c5334, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "833e699f225e1ef1", "b7c1ab31789bc2fa441e9aef7d73f58d6dae45daf16c093303803cea9a05c5fe"}) tkill(r0, 0x7) 03:43:40 executing program 2: unshare(0x2000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800004, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x0) 03:43:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="39e5cd0fe8b942c9139d1719d51c6139ca3a990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, 0x24}}, 0x0) 03:43:40 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1c0, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x158, 0x2e8, 0x2e8, 0x158, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x6020000}}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x2}) [ 1629.589716][T26470] openvswitch: netlink: Either Ethernet header or EtherType is required. 03:43:40 executing program 2: unshare(0x2000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800004, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x0) 03:43:40 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1c0, 0x0, 0xe0, 0xe0, 0x0, 0x0, 0x158, 0x2e8, 0x2e8, 0x158, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x90, 0x0, {0x6020000}}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev, 0x0, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x2}) [ 1629.754336][T26479] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x39, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, 0x24}}, 0x0) [ 1629.799337][ T24] audit: type=1326 audit(1655437420.853:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ed289109 code=0x0 03:43:41 executing program 0: r0 = gettid() r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x400009) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000040)=""/262, 0x106) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x2f7, @time}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0x40a85321, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc08c5334, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "833e699f225e1ef1", "b7c1ab31789bc2fa441e9aef7d73f58d6dae45daf16c093303803cea9a05c5fe"}) tkill(r0, 0x7) [ 1629.955669][T26485] openvswitch: netlink: Either Ethernet header or EtherType is required. 03:43:41 executing program 2: r0 = syz_io_uring_setup(0xb4e, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)=',', 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) shutdown(r3, 0x0) io_uring_enter(r0, 0x3a27, 0x0, 0x0, 0x0, 0x0) 03:43:41 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 03:43:41 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x4, 0x40, 0xf2}) 03:43:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x10, 0x15, 0x0, 0x0, @ipv4=@private}]}, @typed={0x8, 0x0, 0x0, 0x0, @binary="c10a2ab0"}]}, 0x34}}, 0x0) 03:43:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) 03:43:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x10, 0x15, 0x0, 0x0, @ipv4=@private}]}, @typed={0x8, 0x0, 0x0, 0x0, @binary="c10a2ab0"}]}, 0x34}}, 0x0) 03:43:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="39e5cd0fe8b942c9139d1719d51c6139ca3a990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1630.802869][T26503] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.4'. 03:43:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="72048e", 0x3) 03:43:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x10, 0x15, 0x0, 0x0, @ipv4=@private}]}, @typed={0x8, 0x0, 0x0, 0x0, @binary="c10a2ab0"}]}, 0x34}}, 0x0) 03:43:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) 03:43:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="72048e", 0x3) 03:43:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x10, 0x15, 0x0, 0x0, @ipv4=@private}]}, @typed={0x8, 0x0, 0x0, 0x0, @binary="c10a2ab0"}]}, 0x34}}, 0x0) [ 1631.373554][ T24] audit: type=1326 audit(1655437422.433:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ed289109 code=0x0 03:43:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) 03:43:42 executing program 2: r0 = syz_io_uring_setup(0xb4e, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)=',', 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) shutdown(r3, 0x0) io_uring_enter(r0, 0x3a27, 0x0, 0x0, 0x0, 0x0) 03:43:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7d, &(0x7f0000000240)={r4}, &(0x7f0000000340)=0x8) 03:43:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="72048e", 0x3) 03:43:42 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') 03:43:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) 03:43:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="39e5cd0fe8b942c9139d1719d51c6139ca3a990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="72048e", 0x3) 03:43:43 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') 03:43:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7d, &(0x7f0000000240)={r4}, &(0x7f0000000340)=0x8) 03:43:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7d, &(0x7f0000000240)={r4}, &(0x7f0000000340)=0x8) 03:43:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) 03:43:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) [ 1632.841060][ T24] audit: type=1326 audit(1655437423.893:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26547 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ed289109 code=0x0 03:43:44 executing program 2: r0 = syz_io_uring_setup(0xb4e, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)=',', 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) shutdown(r3, 0x0) io_uring_enter(r0, 0x3a27, 0x0, 0x0, 0x0, 0x0) 03:43:44 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') 03:43:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) 03:43:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7d, &(0x7f0000000240)={r4}, &(0x7f0000000340)=0x8) 03:43:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="39e5cd0fe8b942c9139d1719d51c6139ca3a990428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:45 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') 03:43:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) 03:43:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) 03:43:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) [ 1634.670139][ T24] audit: type=1326 audit(1655437425.723:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26581 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ed289109 code=0x0 03:43:46 executing program 2: r0 = syz_io_uring_setup(0xb4e, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)=',', 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0) shutdown(r3, 0x0) io_uring_enter(r0, 0x3a27, 0x0, 0x0, 0x0, 0x0) 03:43:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:46 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000d93000/0x1000)=nil, 0x3) madvise(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x3) 03:43:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:46 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000d93000/0x1000)=nil, 0x3) madvise(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x3) 03:43:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000680)={0x1}, 0x8) r1 = io_uring_setup(0x4d70, &(0x7f0000000140)) dup2(r1, r0) 03:43:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) 03:43:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x4, 0x0, 0x4}}) 03:43:46 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000d93000/0x1000)=nil, 0x3) madvise(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x3) 03:43:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 03:43:47 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000d93000/0x1000)=nil, 0x3) madvise(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x3) 03:43:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 03:43:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0xa0f, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x18e}]}, 0x28}}, 0x0) 03:43:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x8, 0x10001}) 03:43:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="fa8777060f0000ffffffffff949b38ababffce42228d366ce9bfc195bbc5c2f1f64f8ae9453b5d9a7e33e1db7a8859c03d8a73c47e339cc2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b5b087f3131003b00000000000000005d"], 0x78) 03:43:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000080)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 03:43:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0xa0f, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x18e}]}, 0x28}}, 0x0) 03:43:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 03:43:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008091) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 03:43:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x8, 0x10001}) 03:43:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000080)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 03:43:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008091) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 03:43:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 03:43:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0xa0f, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x18e}]}, 0x28}}, 0x0) 03:43:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="fa8777060f0000ffffffffff949b38ababffce42228d366ce9bfc195bbc5c2f1f64f8ae9453b5d9a7e33e1db7a8859c03d8a73c47e339cc2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x8, 0x10001}) 03:43:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000080)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 03:43:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0xa0f, 0x0, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x18e}]}, 0x28}}, 0x0) 03:43:48 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 03:43:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008091) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 03:43:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000080)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 03:43:48 executing program 5: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) 03:43:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x60002004}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008091) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) 03:43:48 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2042}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 03:43:48 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100cfc6ae084c052b000b010000000109022400010000000009040000021f25730009050e02c226ff000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x4, "ae061e28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:43:49 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2042}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 03:43:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="fa8777060f0000ffffffffff949b38ababffce42228d366ce9bfc195bbc5c2f1f64f8ae9453b5d9a7e33e1db7a8859c03d8a73c47e339cc2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:49 executing program 2: r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 03:43:49 executing program 5: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) 03:43:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x8, 0x10001}) 03:43:49 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2042}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 03:43:49 executing program 5: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) [ 1638.354363][ T3556] usb 1-1: new high-speed USB device number 74 using dummy_hcd 03:43:49 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2042}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 03:43:49 executing program 5: unshare(0x40400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) [ 1638.612872][ T3556] usb 1-1: Using ep0 maxpacket: 8 03:43:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cf259140cd0c3900e08f000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1638.782922][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 9922, setting to 1024 [ 1638.794202][ T3556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 1638.804464][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1638.814451][ T3556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 03:43:49 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xb80b, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1638.824483][ T3556] usb 1-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0b [ 1638.833786][ T3556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.943270][ T3556] usb 1-1: config 0 descriptor?? [ 1638.971400][T26706] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1639.035852][ T3556] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1639.284108][ T3556] scsi host1: usb-storage 1-1:0.0 [ 1639.292770][T14841] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1639.466269][T10571] usb 1-1: USB disconnect, device number 74 [ 1639.652628][T14841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=8f.e0 [ 1639.661883][T14841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.674631][T14841] usb 2-1: config 0 descriptor?? [ 1639.723914][T14841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1639.731086][T14841] pvrusb2: ********** [ 1639.735327][T14841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1639.745582][T14841] pvrusb2: Important functionality might not be entirely working. [ 1639.753590][T14841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1639.765109][T14841] pvrusb2: ********** [ 1639.934586][ T1923] pvrusb2: Invalid write control endpoint 03:43:51 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100cfc6ae084c052b000b010000000109022400010000000009040000021f25730009050e02c226ff000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x4, "ae061e28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:43:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="fa8777060f0000ffffffffff949b38ababffce42228d366ce9bfc195bbc5c2f1f64f8ae9453b5d9a7e33e1db7a8859c03d8a73c47e339cc2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:43:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:51 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), 0xffffffffffffffff) 03:43:51 executing program 2: r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) [ 1640.093590][ T1923] pvrusb2: Invalid write control endpoint [ 1640.099441][ T1923] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1640.109123][ T1923] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1640.116934][ T1923] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1640.129856][ T1923] pvrusb2: Device being rendered inoperable [ 1640.136365][ T1923] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1640.143670][ T1923] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1640.152832][ T1923] pvrusb2: Attached sub-driver cx25840 [ 1640.158418][ T1923] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1640.168840][ T1923] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1640.184099][T14841] usb 2-1: USB disconnect, device number 72 03:43:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, {0x8100}}]}, 0x24}}, 0x0) 03:43:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, {0x8100}}]}, 0x24}}, 0x0) 03:43:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:43:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001240), 0x77, 0x401) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000780)={'syz1'}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045503, &(0x7f00000001c0)) [ 1640.702677][ T3549] usb 1-1: new high-speed USB device number 75 using dummy_hcd 03:43:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cf259140cd0c3900e08f000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 03:43:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1640.942509][ T3549] usb 1-1: Using ep0 maxpacket: 8 [ 1641.063424][ T3549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 9922, setting to 1024 [ 1641.074601][ T3549] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 1641.084773][ T3549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1641.094937][ T3549] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1641.105090][ T3549] usb 1-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0b [ 1641.114387][ T3549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.133025][ T3549] usb 1-1: config 0 descriptor?? [ 1641.153404][T26753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1641.175506][ T3549] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1641.192677][T14841] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1641.390562][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1641.397322][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1641.410882][ T3549] scsi host1: usb-storage 1-1:0.0 [ 1641.552530][T14841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=8f.e0 [ 1641.564614][T14841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.581353][T14841] usb 2-1: config 0 descriptor?? [ 1641.602212][ T3556] usb 1-1: USB disconnect, device number 75 [ 1641.630805][T14841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1641.638194][T14841] pvrusb2: ********** [ 1641.642961][T14841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1641.653308][T14841] pvrusb2: Important functionality might not be entirely working. [ 1641.661208][T14841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1641.677006][T14841] pvrusb2: ********** [ 1641.843882][ T1923] pvrusb2: Invalid write control endpoint [ 1641.930519][ T1923] pvrusb2: Invalid write control endpoint [ 1641.937048][ T1923] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1641.946627][ T1923] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1641.954366][ T1923] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1641.964651][ T1923] pvrusb2: Device being rendered inoperable [ 1641.973344][ T1923] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1641.980558][ T1923] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1641.989970][ T1923] pvrusb2: Attached sub-driver cx25840 [ 1641.995618][ T1923] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1642.005859][ T1923] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1642.059332][ T3556] usb 2-1: USB disconnect, device number 73 03:43:53 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100cfc6ae084c052b000b010000000109022400010000000009040000021f25730009050e02c226ff000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x4, "ae061e28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:43:53 executing program 2: r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 03:43:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001240), 0x77, 0x401) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000780)={'syz1'}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045503, &(0x7f00000001c0)) 03:43:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) 03:43:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, {0x8100}}]}, 0x24}}, 0x0) [ 1642.221778][T26779] "syz-executor.5" (26779) uses obsolete ecb(arc4) skcipher 03:43:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, {0x8100}}]}, 0x24}}, 0x0) 03:43:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001240), 0x77, 0x401) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000780)={'syz1'}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045503, &(0x7f00000001c0)) 03:43:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) 03:43:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) [ 1642.534530][T26788] "syz-executor.5" (26788) uses obsolete ecb(arc4) skcipher 03:43:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cf259140cd0c3900e08f000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 03:43:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) [ 1642.598489][T26790] "syz-executor.3" (26790) uses obsolete ecb(arc4) skcipher [ 1642.606741][T14841] usb 1-1: new high-speed USB device number 76 using dummy_hcd 03:43:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001240), 0x77, 0x401) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000780)={'syz1'}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045503, &(0x7f00000001c0)) [ 1642.747523][T26792] "syz-executor.5" (26792) uses obsolete ecb(arc4) skcipher [ 1642.852394][T14841] usb 1-1: Using ep0 maxpacket: 8 [ 1642.973734][T14841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 9922, setting to 1024 [ 1642.985088][T14841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 1642.995355][T14841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1643.005399][T14841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1643.015464][T14841] usb 1-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0b [ 1643.024837][T14841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.053474][T14841] usb 1-1: config 0 descriptor?? [ 1643.073404][T26782] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1643.100007][T14841] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1643.108742][ T3549] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1643.323712][T14841] scsi host1: usb-storage 1-1:0.0 [ 1643.482550][ T3549] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=8f.e0 [ 1643.491814][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.528077][T14841] usb 1-1: USB disconnect, device number 76 [ 1643.541201][ T3549] usb 2-1: config 0 descriptor?? [ 1643.590426][ T3549] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1643.598433][ T3549] pvrusb2: ********** [ 1643.602674][ T3549] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1643.617334][ T3549] pvrusb2: Important functionality might not be entirely working. [ 1643.626023][ T3549] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1643.637575][ T3549] pvrusb2: ********** [ 1643.802915][ T1923] pvrusb2: Invalid write control endpoint [ 1643.902797][ T1923] pvrusb2: Invalid write control endpoint [ 1643.908641][ T1923] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1643.922092][ T1923] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1643.929932][ T1923] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1643.940831][ T1923] pvrusb2: Device being rendered inoperable [ 1643.947018][ T1923] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1643.954287][ T1923] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1643.963417][ T1923] pvrusb2: Attached sub-driver cx25840 [ 1643.969011][ T1923] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1643.979350][ T1923] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1644.010354][ T3549] usb 2-1: USB disconnect, device number 74 03:43:55 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100cfc6ae084c052b000b010000000109022400010000000009040000021f25730009050e02c226ff000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x0, 0x0, 0x4, "ae061e28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:43:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) 03:43:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000500)=0x5, 0x4) recvfrom(r0, 0x0, 0xfffffffffffffec3, 0x40000042, 0x0, 0x0) 03:43:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) 03:43:55 executing program 2: r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 03:43:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000500)=0x5, 0x4) recvfrom(r0, 0x0, 0xfffffffffffffec3, 0x40000042, 0x0, 0x0) [ 1644.145021][T26805] "syz-executor.5" (26805) uses obsolete ecb(arc4) skcipher [ 1644.170344][T26808] "syz-executor.3" (26808) uses obsolete ecb(arc4) skcipher 03:43:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) close(r1) 03:43:55 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb8, &(0x7f0000000080), &(0x7f00000000c0)=0x40) [ 1644.395661][T26814] "syz-executor.3" (26814) uses obsolete ecb(arc4) skcipher 03:43:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000500)=0x5, 0x4) recvfrom(r0, 0x0, 0xfffffffffffffec3, 0x40000042, 0x0, 0x0) [ 1644.513012][ T3556] usb 1-1: new high-speed USB device number 77 using dummy_hcd 03:43:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cf259140cd0c3900e08f000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 03:43:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000500)=0x5, 0x4) recvfrom(r0, 0x0, 0xfffffffffffffec3, 0x40000042, 0x0, 0x0) [ 1644.782541][ T3556] usb 1-1: Using ep0 maxpacket: 8 [ 1644.912805][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 9922, setting to 1024 [ 1644.924368][ T3556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 1644.934738][ T3556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1644.946617][ T3556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1644.956921][ T3556] usb 1-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0b [ 1644.966200][ T3556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.984057][ T125] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1645.006753][ T3556] usb 1-1: config 0 descriptor?? [ 1645.033529][T26811] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1645.057320][ T3556] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1645.295895][ T3556] scsi host1: usb-storage 1-1:0.0 [ 1645.383292][ T125] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=8f.e0 [ 1645.392723][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.418172][ T125] usb 2-1: config 0 descriptor?? [ 1645.469529][ T3556] usb 1-1: USB disconnect, device number 77 [ 1645.491216][ T125] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1645.498584][ T125] pvrusb2: ********** [ 1645.502808][ T125] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1645.513179][ T125] pvrusb2: Important functionality might not be entirely working. [ 1645.521081][ T125] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1645.533412][ T125] pvrusb2: ********** [ 1645.695105][ T1923] pvrusb2: Invalid write control endpoint [ 1645.757301][ T1923] pvrusb2: Invalid write control endpoint [ 1645.766611][ T1923] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1645.777127][ T1923] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1645.784854][ T1923] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1645.795009][ T1923] pvrusb2: Device being rendered inoperable [ 1645.801029][ T1923] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1645.808329][ T1923] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1645.817424][ T1923] pvrusb2: Attached sub-driver cx25840 [ 1645.823066][ T1923] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1645.833313][ T1923] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1645.905507][T14841] usb 2-1: USB disconnect, device number 75 03:43:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 03:43:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 03:43:57 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb8, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 03:43:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 03:43:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 03:43:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x2}]}, 0x24}}, 0x0) 03:43:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:43:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x2}]}, 0x24}}, 0x0) 03:43:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 03:43:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x2}]}, 0x24}}, 0x0) 03:43:57 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000001c80)=0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3900}, 0x0, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:anacron_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) fstatfs(r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001380)=ANY=[@ANYRESHEX, @ANYRES16], 0x208e24b) 03:43:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 03:43:58 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb8, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 03:43:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 03:43:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 03:43:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x2}]}, 0x24}}, 0x0) 03:43:58 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1}) 03:43:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 03:43:58 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1}) 03:43:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3d}]}}]}}]}, 0x44}}, 0x0) 03:43:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 03:43:58 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1}) [ 1647.815896][T26885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1647.850929][T26885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:59 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xf0f02c, 0x0, '\x00', @p_u8=0x0}}) 03:43:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 03:43:59 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb8, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 03:43:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3d}]}}]}}]}, 0x44}}, 0x0) 03:43:59 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000001c80)=0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3900}, 0x0, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:anacron_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) fstatfs(r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001380)=ANY=[@ANYRESHEX, @ANYRES16], 0x208e24b) 03:43:59 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x1}) [ 1648.343800][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:59 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xf0f02c, 0x0, '\x00', @p_u8=0x0}}) [ 1648.458129][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:59 executing program 4: unshare(0x20000400) r0 = io_uring_setup(0x1853, &(0x7f0000000000)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 03:43:59 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xf0f02c, 0x0, '\x00', @p_u8=0x0}}) 03:43:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3d}]}}]}}]}, 0x44}}, 0x0) 03:43:59 executing program 4: unshare(0x20000400) r0 = io_uring_setup(0x1853, &(0x7f0000000000)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 03:44:00 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xf0f02c, 0x0, '\x00', @p_u8=0x0}}) 03:44:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 03:44:00 executing program 4: unshare(0x20000400) r0 = io_uring_setup(0x1853, &(0x7f0000000000)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) [ 1649.169922][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:00 executing program 5: r0 = io_uring_setup(0x7d82, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) [ 1649.255629][T26926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:00 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000001c80)=0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3900}, 0x0, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:anacron_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) fstatfs(r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001380)=ANY=[@ANYRESHEX, @ANYRES16], 0x208e24b) 03:44:00 executing program 4: unshare(0x20000400) r0 = io_uring_setup(0x1853, &(0x7f0000000000)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 03:44:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3d}]}}]}}]}, 0x44}}, 0x0) 03:44:00 executing program 5: r0 = io_uring_setup(0x7d82, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) 03:44:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x403, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x40) sendmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001180)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x85, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe57) [ 1649.893445][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1649.925766][T26947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:01 executing program 5: r0 = io_uring_setup(0x7d82, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) 03:44:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:01 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) 03:44:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x403, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x40) sendmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001180)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x85, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe57) 03:44:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:01 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe9, 0x0) [ 1650.421811][ T24] audit: type=1326 audit(1655437441.473:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.582714][ T24] audit: type=1326 audit(1655437441.523:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.606201][ T24] audit: type=1326 audit(1655437441.573:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.629526][ T24] audit: type=1326 audit(1655437441.573:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.653269][ T24] audit: type=1326 audit(1655437441.593:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 03:44:01 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000001c80)=0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3900}, 0x0, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:anacron_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) fstatfs(r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001380)=ANY=[@ANYRESHEX, @ANYRES16], 0x208e24b) 03:44:01 executing program 5: r0 = io_uring_setup(0x7d82, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, '\x00', [{}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) [ 1650.678429][ T24] audit: type=1326 audit(1655437441.593:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.702360][ T24] audit: type=1326 audit(1655437441.593:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.725712][ T24] audit: type=1326 audit(1655437441.593:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.748966][ T24] audit: type=1326 audit(1655437441.603:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 [ 1650.772289][ T24] audit: type=1326 audit(1655437441.603:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x7ffc0000 03:44:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x403, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x40) sendmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001180)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x85, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe57) 03:44:01 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) [ 1650.933637][T26971] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141143, 0x0) flock(r0, 0x0) 03:44:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:44:02 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) 03:44:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x403, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x40) sendmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001180)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x85, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0xfe57) 03:44:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:44:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141143, 0x0) flock(r0, 0x0) 03:44:02 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) 03:44:03 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe9, 0x0) 03:44:03 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x47) 03:44:03 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 03:44:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:44:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141143, 0x0) flock(r0, 0x0) 03:44:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) 03:44:03 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 03:44:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141143, 0x0) flock(r0, 0x0) 03:44:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:44:03 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x47) 03:44:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) [ 1652.632269][T27022] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:03 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 03:44:04 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe9, 0x0) 03:44:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) 03:44:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) 03:44:04 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x47) 03:44:04 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 03:44:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) 03:44:04 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:44:04 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x47) 03:44:04 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) 03:44:04 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:44:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) [ 1653.763443][T27054] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) [ 1654.020109][ T125] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1654.292307][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 1654.413429][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1654.424712][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1654.434771][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1654.444791][ T125] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 03:44:05 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe9, 0x0) 03:44:05 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) 03:44:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:44:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)) 03:44:05 executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) exit(0x0) fcntl$setown(r0, 0x8, 0x0) [ 1654.454731][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1654.466639][ T125] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1654.477050][ T125] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1654.486370][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:44:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x1, 0x1) [ 1654.840381][ T125] usb 5-1: config 0 descriptor?? [ 1654.898003][ T125] mos7840 5-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1654.943238][T27090] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1656.192857][ T125] mos7840: probe of ttyUSB0 failed with error -71 [ 1656.226803][ T125] usb 5-1: USB disconnect, device number 126 [ 1656.238885][ T125] mos7840 5-1:0.0: device disconnected 03:44:07 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x1, 0x1) 03:44:07 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) 03:44:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 03:44:07 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:44:07 executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) exit(0x0) fcntl$setown(r0, 0x8, 0x0) 03:44:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00004800222802001c0012800c0001006d6163766c616e000c000080080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000f00fcfffffd08002800ea40000014001400766574683100000000000000000000000a000100aa"], 0xe4}}, 0x0) [ 1656.732584][ T27] kworker/dying (27) used greatest stack depth: 2488 bytes left [ 1656.814565][T27097] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 03:44:08 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) 03:44:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00004800222802001c0012800c0001006d6163766c616e000c000080080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000f00fcfffffd08002800ea40000014001400766574683100000000000000000000000a000100aa"], 0xe4}}, 0x0) 03:44:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000600)='./file0\x00') [ 1657.103886][T27108] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xb0}}, 0x0) [ 1657.163105][ T3549] usb 5-1: new high-speed USB device number 127 using dummy_hcd 03:44:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00004800222802001c0012800c0001006d6163766c616e000c000080080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000f00fcfffffd08002800ea40000014001400766574683100000000000000000000000a000100aa"], 0xe4}}, 0x0) 03:44:08 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) 03:44:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000600)='./file0\x00') [ 1657.366768][T27118] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1657.402485][ T3549] usb 5-1: Using ep0 maxpacket: 32 03:44:08 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) [ 1657.526810][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1657.541884][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1657.552853][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1657.562782][ T3549] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1657.572727][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1657.582741][ T3549] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1657.592863][ T3549] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1657.602198][ T3549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.713526][ T3549] usb 5-1: config 0 descriptor?? [ 1657.758801][ T3549] mos7840 5-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1659.062677][ T3549] mos7840: probe of ttyUSB0 failed with error -71 [ 1659.082565][ T3549] usb 5-1: USB disconnect, device number 127 [ 1659.095225][ T3549] mos7840 5-1:0.0: device disconnected 03:44:10 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:44:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00004800222802001c0012800c0001006d6163766c616e000c000080080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000f00fcfffffd08002800ea40000014001400766574683100000000000000000000000a000100aa"], 0xe4}}, 0x0) 03:44:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 03:44:10 executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) exit(0x0) fcntl$setown(r0, 0x8, 0x0) 03:44:10 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb) 03:44:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000600)='./file0\x00') [ 1659.674944][T27138] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x40) 03:44:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main, @local=@item_012={0x2, 0x2, 0x0, "64c5"}, @main, @local, @global]}}, 0x0}, 0x0) 03:44:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x865410, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000600)='./file0\x00') [ 1659.922810][ T3549] usb 5-1: new high-speed USB device number 2 using dummy_hcd 03:44:11 executing program 0: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) [ 1660.059904][T27148] libceph: resolve 'c,%-%õÌ×fÍ [ 1660.059904][T27148] ¹Ç²a [ 1660.059904][T27148] ×ïÅ2iˆ [ 1660.059904][T27148]  [ 1660.059904][T27148] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed 03:44:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x40) [ 1660.162485][ T3549] usb 5-1: Using ep0 maxpacket: 32 03:44:11 executing program 0: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) [ 1660.232834][T14841] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1660.283051][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1660.294421][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1660.304492][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1660.314447][ T3549] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1660.324397][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1660.334458][ T3549] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1660.344543][ T3549] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1660.353950][ T3549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.388586][ T3549] usb 5-1: config 0 descriptor?? [ 1660.436707][T27156] libceph: resolve 'c,%-%õÌ×fÍ [ 1660.436707][T27156] ¹Ç²a [ 1660.436707][T27156] ×ïÅ2iˆ [ 1660.436707][T27156]  [ 1660.436707][T27156] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed [ 1660.439620][ T3549] mos7840 5-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1660.632642][T14841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.644184][T14841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.654387][T14841] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1660.663994][T14841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.678804][T14841] usb 2-1: config 0 descriptor?? [ 1661.166575][T14841] monterey 0003:0566:3004.0057: unknown main item tag 0x0 [ 1661.174132][T14841] monterey 0003:0566:3004.0057: unknown main item tag 0x0 [ 1661.186703][T14841] monterey 0003:0566:3004.0057: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 1661.368294][ T3556] usb 2-1: USB disconnect, device number 76 [ 1661.752527][ T3549] mos7840: probe of ttyUSB0 failed with error -71 [ 1661.765762][ T3549] usb 5-1: USB disconnect, device number 2 [ 1661.778053][ T3549] mos7840 5-1:0.0: device disconnected 03:44:13 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3760120109710786d040000000109022d0001000000000904000003f88be60009058d1f000000000009050502000000000009058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:44:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x40) 03:44:13 executing program 5: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) 03:44:13 executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) exit(0x0) fcntl$setown(r0, 0x8, 0x0) 03:44:13 executing program 0: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) 03:44:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main, @local=@item_012={0x2, 0x2, 0x0, "64c5"}, @main, @local, @global]}}, 0x0}, 0x0) [ 1662.345244][T27163] libceph: resolve 'c,%-%õÌ×fÍ [ 1662.345244][T27163] ¹Ç²a [ 1662.345244][T27163] ×ïÅ2iˆ [ 1662.345244][T27163]  [ 1662.345244][T27163] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed [ 1662.369865][T27164] libceph: resolve 'c,%-%õÌ×fÍ [ 1662.369865][T27164] ¹Ç²a [ 1662.369865][T27164] ×ïÅ2iˆ [ 1662.369865][T27164]  [ 1662.369865][T27164] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed 03:44:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x40) 03:44:13 executing program 5: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) 03:44:13 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 03:44:13 executing program 0: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) [ 1662.603353][ T3549] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1662.678968][T27176] libceph: resolve 'c,%-%õÌ×fÍ [ 1662.678968][T27176] ¹Ç²a [ 1662.678968][T27176] ×ïÅ2iˆ [ 1662.678968][T27176]  [ 1662.678968][T27176] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed [ 1662.682908][T27178] libceph: resolve 'c,%-%õÌ×fÍ [ 1662.682908][T27178] ¹Ç²a [ 1662.682908][T27178] ×ïÅ2iˆ [ 1662.682908][T27178]  [ 1662.682908][T27178] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed 03:44:13 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) [ 1662.733769][T14841] usb 5-1: new high-speed USB device number 3 using dummy_hcd 03:44:13 executing program 5: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='[c,%-%\xf5\xcc\xd7\bf\xcd\n\xb9\xc7\x9d\xb2a\n\xd7\xef\xc5\x112i\x88\n\x13\n\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc%://\x00\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='./%+\\#\x04](\x00', 0x0) [ 1662.955233][T27183] libceph: resolve 'c,%-%õÌ×fÍ [ 1662.955233][T27183] ¹Ç²a [ 1662.955233][T27183] ×ïÅ2iˆ [ 1662.955233][T27183]  [ 1662.955233][T27183] ÖúÕ?Çý&*»|&,é£'‘>C‡ëþ\CþI'®KHq‰ƒ»CÖHy¤¶ˆÛ¡b®§‡ÌǤÜ%' (ret=-3): failed [ 1662.983761][T14841] usb 5-1: Using ep0 maxpacket: 32 [ 1662.997660][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.009564][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.019766][ T3549] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1663.029143][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.047213][ T3549] usb 2-1: config 0 descriptor?? [ 1663.133320][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1663.144812][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1663.155070][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1663.165092][T14841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1663.178005][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1663.188773][T14841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1663.198869][T14841] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 4.6d [ 1663.208322][T14841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.240660][T14841] usb 5-1: config 0 descriptor?? [ 1663.287594][T14841] mos7840 5-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1663.526384][ T3549] monterey 0003:0566:3004.0058: unknown main item tag 0x0 [ 1663.534051][ T3549] monterey 0003:0566:3004.0058: unknown main item tag 0x0 [ 1663.549986][ T3549] monterey 0003:0566:3004.0058: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 1663.740338][T10571] usb 2-1: USB disconnect, device number 77 [ 1664.592386][T14841] mos7840: probe of ttyUSB0 failed with error -71 [ 1664.632514][T14841] usb 5-1: USB disconnect, device number 3 [ 1664.644267][T14841] mos7840 5-1:0.0: device disconnected 03:44:16 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 03:44:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x2000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x0, 0x2, [{r1, 0x0, 0x0, 0x2000}]}) 03:44:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) 03:44:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000002ac0)={0xa, 0x4e24, 0x0, @dev, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0x0, 0x1ff0000aa}}}}], 0x28}}], 0x2, 0x0) 03:44:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main, @local=@item_012={0x2, 0x2, 0x0, "64c5"}, @main, @local, @global]}}, 0x0}, 0x0) 03:44:16 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 03:44:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x2000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x0, 0x2, [{r1, 0x0, 0x0, 0x2000}]}) 03:44:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) 03:44:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000002ac0)={0xa, 0x4e24, 0x0, @dev, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0x0, 0x1ff0000aa}}}}], 0x28}}], 0x2, 0x0) 03:44:16 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) [ 1665.453051][ T3556] usb 2-1: new high-speed USB device number 78 using dummy_hcd 03:44:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 03:44:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x2000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x0, 0x2, [{r1, 0x0, 0x0, 0x2000}]}) 03:44:16 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) 03:44:16 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) 03:44:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000002ac0)={0xa, 0x4e24, 0x0, @dev, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0x0, 0x1ff0000aa}}}}], 0x28}}], 0x2, 0x0) 03:44:16 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) [ 1665.832574][ T3556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.844341][ T3556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.854463][ T3556] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1665.863789][ T3556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.942714][ T3556] usb 2-1: config 0 descriptor?? [ 1666.416512][ T3556] monterey 0003:0566:3004.0059: unknown main item tag 0x0 [ 1666.424041][ T3556] monterey 0003:0566:3004.0059: unknown main item tag 0x0 [ 1666.439655][ T3556] monterey 0003:0566:3004.0059: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 1666.637860][ T3556] usb 2-1: USB disconnect, device number 78 03:44:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main, @local=@item_012={0x2, 0x2, 0x0, "64c5"}, @main, @local, @global]}}, 0x0}, 0x0) 03:44:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) ftruncate(r1, 0x2000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x0, 0x2, [{r1, 0x0, 0x0, 0x2000}]}) 03:44:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 03:44:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000002ac0)={0xa, 0x4e24, 0x0, @dev, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0x0, 0x1ff0000aa}}}}], 0x28}}], 0x2, 0x0) 03:44:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000380)={0x2, 0x0, @empty, 0x1}, 0x10) 03:44:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 03:44:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 03:44:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 03:44:18 executing program 5: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000a9358a40e10632f3f6800102030109022d000200000000090400000290c60a0009058401f9e60000000905041d00bc04000009040001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:44:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000340)="f3470f0948b800000000000000000f23c80f21f8350400f0000f23f8430f79bf37900000400f7866c93e6466660fae739666b82f008ee0450f01df4a0fc75c9f84400f38f1aa0700000048b800980000000000000f23d00f21f835200000080f23f8", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008c39b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:44:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 03:44:18 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0}) [ 1667.702819][T10571] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1667.792489][T14841] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1668.062569][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.074313][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.087342][T10571] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1668.097316][T10571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.117066][T10571] usb 2-1: config 0 descriptor?? [ 1668.182451][T14841] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1668.194363][T14841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1668.206272][T14841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59129, setting to 1024 [ 1668.217863][T14841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41984, setting to 1024 [ 1668.383118][T14841] usb 6-1: New USB device found, idVendor=06e1, idProduct=f332, bcdDevice=80.f6 [ 1668.395662][T14841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.404121][T14841] usb 6-1: Product: syz [ 1668.408427][T14841] usb 6-1: Manufacturer: syz [ 1668.413262][T14841] usb 6-1: SerialNumber: syz [ 1668.421540][T14841] usb 6-1: config 0 descriptor?? [ 1668.606481][T10571] monterey 0003:0566:3004.005A: unknown main item tag 0x0 [ 1668.613969][T10571] monterey 0003:0566:3004.005A: unknown main item tag 0x0 [ 1668.626849][T10571] monterey 0003:0566:3004.005A: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 1668.682881][T14841] tm6000: alt 0, interface 0, class 144 [ 1668.688582][T14841] tm6000: ISOC IN endpoint: 0x84 (max size=1024 bytes) [ 1668.700378][T14841] tm6000: alt 0, interface 0, class 144 [ 1668.706799][T14841] tm6000: New video device @ 480 Mbps (06e1:f332, ifnum 0) [ 1668.714230][T14841] tm6000: Found ADSTECH Dual TV USB [ 1668.811573][ T3556] usb 2-1: USB disconnect, device number 79 [ 1668.909757][T14841] Unknown board version = 0x00000000 [ 1669.119373][T14841] Error -71 while setting req 7, reg 223 to value 31 [ 1669.126488][T14841] tm6000: Error -71 while registering [ 1669.132203][T14841] tm6000: probe of 6-1:0.0 failed with error -71 [ 1669.144682][T14841] usb 6-1: USB disconnect, device number 106 03:44:20 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 03:44:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 03:44:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 03:44:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000340)="f3470f0948b800000000000000000f23c80f21f8350400f0000f23f8430f79bf37900000400f7866c93e6466660fae739666b82f008ee0450f01df4a0fc75c9f84400f38f1aa0700000048b800980000000000000f23d00f21f835200000080f23f8", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008c39b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:44:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 03:44:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 03:44:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 03:44:20 executing program 5: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000a9358a40e10632f3f6800102030109022d000200000000090400000290c60a0009058401f9e60000000905041d00bc04000009040001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:44:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000340)="f3470f0948b800000000000000000f23c80f21f8350400f0000f23f8430f79bf37900000400f7866c93e6466660fae739666b82f008ee0450f01df4a0fc75c9f84400f38f1aa0700000048b800980000000000000f23d00f21f835200000080f23f8", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008c39b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:44:20 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 03:44:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77000000000c00020008000100073a02e1"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:44:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 03:44:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) [ 1669.997524][T27269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1670.113146][T10571] usb 6-1: new high-speed USB device number 107 using dummy_hcd 03:44:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 03:44:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77000000000c00020008000100073a02e1"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:44:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) syz_open_pts(r0, 0x0) 03:44:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000340)="f3470f0948b800000000000000000f23c80f21f8350400f0000f23f8430f79bf37900000400f7866c93e6466660fae739666b82f008ee0450f01df4a0fc75c9f84400f38f1aa0700000048b800980000000000000f23d00f21f835200000080f23f8", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008c39b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:44:21 executing program 2: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1670.394011][T27281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) [ 1670.514326][T10571] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1670.523623][T10571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1670.534899][T10571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59129, setting to 1024 [ 1670.549114][T10571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41984, setting to 1024 [ 1670.783254][T10571] usb 6-1: New USB device found, idVendor=06e1, idProduct=f332, bcdDevice=80.f6 [ 1670.792831][T10571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.801009][T10571] usb 6-1: Product: syz [ 1670.805501][T10571] usb 6-1: Manufacturer: syz [ 1670.810250][T10571] usb 6-1: SerialNumber: syz [ 1670.975486][T10571] usb 6-1: config 0 descriptor?? [ 1671.255754][T10571] tm6000: alt 0, interface 0, class 144 [ 1671.261476][T10571] tm6000: ISOC IN endpoint: 0x84 (max size=1024 bytes) [ 1671.268628][T10571] tm6000: alt 0, interface 0, class 144 [ 1671.274401][T10571] tm6000: New video device @ 480 Mbps (06e1:f332, ifnum 0) [ 1671.281746][T10571] tm6000: Found ADSTECH Dual TV USB [ 1671.504058][T10571] Unknown board version = 0x00000000 [ 1671.709040][T10571] Error -71 while setting req 7, reg 223 to value 31 [ 1671.716384][T10571] tm6000: Error -71 while registering [ 1671.721864][T10571] tm6000: probe of 6-1:0.0 failed with error -71 [ 1671.738428][T10571] usb 6-1: USB disconnect, device number 107 03:44:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77000000000c00020008000100073a02e1"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:44:23 executing program 5: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000a9358a40e10632f3f6800102030109022d000200000000090400000290c60a0009058401f9e60000000905041d00bc04000009040001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:44:23 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @random="68d6af8825f3", @val={@void}, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xe0}, @rr={0x7, 0x3, 0x3f}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ebf33d", 0x0, "57c5f0"}}}}}}, 0x0) 03:44:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f8ebc43e"}}) 03:44:23 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x0, 0x81, 0x0, 0x0) 03:44:23 executing program 2: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1672.296215][T27304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:23 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x0, 0x81, 0x0, 0x0) 03:44:23 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 03:44:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f8ebc43e"}}) 03:44:23 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x0, 0x81, 0x0, 0x0) 03:44:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c0000000b000100666c6f77000000000c00020008000100073a02e1"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1672.725143][ T125] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1672.748059][T27321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:24 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f8ebc43e"}}) 03:44:24 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x0, 0x81, 0x0, 0x0) [ 1673.143135][ T125] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1673.152377][ T125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1673.163675][ T125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59129, setting to 1024 [ 1673.175087][ T125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41984, setting to 1024 [ 1673.539454][ T125] usb 6-1: New USB device found, idVendor=06e1, idProduct=f332, bcdDevice=80.f6 [ 1673.548898][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.557347][ T125] usb 6-1: Product: syz [ 1673.561652][ T125] usb 6-1: Manufacturer: syz [ 1673.566593][ T125] usb 6-1: SerialNumber: syz [ 1673.585735][ T125] usb 6-1: config 0 descriptor?? [ 1674.062679][ T125] tm6000: alt 0, interface 0, class 144 [ 1674.068369][ T125] tm6000: ISOC IN endpoint: 0x84 (max size=1024 bytes) [ 1674.075641][ T125] tm6000: alt 0, interface 0, class 144 [ 1674.081307][ T125] tm6000: New video device @ 480 Mbps (06e1:f332, ifnum 0) [ 1674.088790][ T125] tm6000: Found ADSTECH Dual TV USB [ 1674.283998][ T125] Unknown board version = 0x00000000 [ 1674.490547][ T125] Error -71 while setting req 7, reg 223 to value 31 [ 1674.497611][ T125] tm6000: Error -71 while registering [ 1674.503349][ T125] tm6000: probe of 6-1:0.0 failed with error -71 [ 1674.548687][ T125] usb 6-1: USB disconnect, device number 108 03:44:26 executing program 5: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000a9358a40e10632f3f6800102030109022d000200000000090400000290c60a0009058401f9e60000000905041d00bc04000009040001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:44:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/2972], &(0x7f00000001c0)='GPL\x00'}, 0x48) 03:44:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) pselect6(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc058565d, &(0x7f00000000c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f8ebc43e"}}) 03:44:26 executing program 2: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 03:44:26 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000002c0)={0x24, 0x14, 0x1, 0x0, 0x0, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "985422aa23dbd1a70d"}]}, 0x24}}, 0x0) 03:44:26 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 03:44:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 03:44:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/2972], &(0x7f00000001c0)='GPL\x00'}, 0x48) 03:44:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8}}}}]}, 0x38}}, 0x0) 03:44:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 03:44:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/2972], &(0x7f00000001c0)='GPL\x00'}, 0x48) [ 1675.492472][T10571] usb 6-1: new high-speed USB device number 109 using dummy_hcd 03:44:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) [ 1675.925843][T10571] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1675.935279][T10571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1675.947116][T10571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59129, setting to 1024 [ 1675.958757][T10571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41984, setting to 1024 [ 1676.382570][T10571] usb 6-1: New USB device found, idVendor=06e1, idProduct=f332, bcdDevice=80.f6 [ 1676.391880][T10571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.400328][T10571] usb 6-1: Product: syz [ 1676.404847][T10571] usb 6-1: Manufacturer: syz [ 1676.409594][T10571] usb 6-1: SerialNumber: syz [ 1676.419838][T10571] usb 6-1: config 0 descriptor?? [ 1676.685083][T10571] tm6000: alt 0, interface 0, class 144 [ 1676.690784][T10571] tm6000: ISOC IN endpoint: 0x84 (max size=1024 bytes) [ 1676.698527][T10571] tm6000: alt 0, interface 0, class 144 [ 1676.704326][T10571] tm6000: New video device @ 480 Mbps (06e1:f332, ifnum 0) [ 1676.711651][T10571] tm6000: Found ADSTECH Dual TV USB [ 1676.902403][T10571] Unknown board version = 0x00000000 [ 1677.117639][T10571] Error -71 while setting req 7, reg 223 to value 31 [ 1677.124634][T10571] tm6000: Error -71 while registering [ 1677.130108][T10571] tm6000: probe of 6-1:0.0 failed with error -71 [ 1677.140950][T10571] usb 6-1: USB disconnect, device number 109 03:44:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/2972], &(0x7f00000001c0)='GPL\x00'}, 0x48) 03:44:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8}}}}]}, 0x38}}, 0x0) 03:44:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 03:44:28 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 03:44:28 executing program 2: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 03:44:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8}}}}]}, 0x38}}, 0x0) 03:44:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0x58}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xac}}, 0x0) 03:44:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x23}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1678.129949][T27375] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1678.138529][T27375] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1678.146903][T27375] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1678.194563][T27377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8}}}}]}, 0x38}}, 0x0) 03:44:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0x58}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xac}}, 0x0) 03:44:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x10, 0x339, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_LABEL={0x14, 0x3, 'ip6gretap0\x00'}, @IFA_ADDRESS={0x8}]}, 0x3c}}, 0x0) 03:44:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x23}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:44:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x10, 0x339, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_LABEL={0x14, 0x3, 'ip6gretap0\x00'}, @IFA_ADDRESS={0x8}]}, 0x3c}}, 0x0) [ 1678.556883][T27386] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1678.565714][T27386] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1678.574155][T27386] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000c, 0x12, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffe99) [ 1678.680669][T27389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0x58}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xac}}, 0x0) [ 1679.006671][T27401] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1679.015199][T27401] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1679.023611][T27401] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:30 executing program 1: unshare(0x400) r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) 03:44:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000c, 0x12, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffe99) 03:44:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x10, 0x339, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_LABEL={0x14, 0x3, 'ip6gretap0\x00'}, @IFA_ADDRESS={0x8}]}, 0x3c}}, 0x0) 03:44:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0x58}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xac}}, 0x0) 03:44:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x23}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:44:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) [ 1679.531535][T27409] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1679.540420][T27409] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1679.548792][T27409] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1679.571660][T27411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) 03:44:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000c, 0x12, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffe99) 03:44:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x10, 0x339, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_LABEL={0x14, 0x3, 'ip6gretap0\x00'}, @IFA_ADDRESS={0x8}]}, 0x3c}}, 0x0) 03:44:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r1, r0) 03:44:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000c, 0x12, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffe99) 03:44:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) 03:44:31 executing program 1: unshare(0x400) r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) 03:44:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x23}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_CLASSID={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 03:44:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x32315559}}) 03:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r1, r0) 03:44:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000505d25a80648c63940d0324fc6010000240", 0x18}], 0x1}, 0x0) 03:44:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) [ 1680.125603][T27429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x32315559}}) 03:44:31 executing program 1: unshare(0x400) r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) 03:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r1, r0) 03:44:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000505d25a80648c63940d0324fc6010000240", 0x18}], 0x1}, 0x0) 03:44:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb4}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 03:44:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x32315559}}) 03:44:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup2(r1, r0) 03:44:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 03:44:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000505d25a80648c63940d0324fc6010000240", 0x18}], 0x1}, 0x0) 03:44:31 executing program 1: unshare(0x400) r0 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) 03:44:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb4}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 03:44:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x32315559}}) 03:44:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 03:44:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x0, 0xf0, 0x338, 0x0, 0xf0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0xba}}}, {{@ipv6={@private0, @local, [], [], 'team_slave_1\x00', 'nr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@udp={{0x30}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:fsadm_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) 03:44:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 03:44:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000505d25a80648c63940d0324fc6010000240", 0x18}], 0x1}, 0x0) 03:44:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb4}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 03:44:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 03:44:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1000007fff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) 03:44:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x0, 0xf0, 0x338, 0x0, 0xf0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0xba}}}, {{@ipv6={@private0, @local, [], [], 'team_slave_1\x00', 'nr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@udp={{0x30}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:fsadm_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) 03:44:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 03:44:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 03:44:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb4}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 03:44:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x206dfe}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) 03:44:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x0, 0xf0, 0x338, 0x0, 0xf0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0xba}}}, {{@ipv6={@private0, @local, [], [], 'team_slave_1\x00', 'nr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@udp={{0x30}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:fsadm_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) 03:44:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1000007fff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) 03:44:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x1b, 0x5b, 0x33, 0x7, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x6d, 0x40}}, 0x40) 03:44:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x0, 0xf0, 0x338, 0x0, 0xf0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0xba}}}, {{@ipv6={@private0, @local, [], [], 'team_slave_1\x00', 'nr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@udp={{0x30}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:fsadm_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) 03:44:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 03:44:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x206dfe}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) 03:44:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1000007fff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) 03:44:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x40}}, 0x0) 03:44:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x1b, 0x5b, 0x33, 0x7, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x6d, 0x40}}, 0x40) 03:44:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 03:44:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000180)=0x1000007fff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xfe57) 03:44:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @vbi={0x0, 0x0, 0x34324152}}) 03:44:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x206dfe}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) 03:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x40}}, 0x0) 03:44:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x1b, 0x5b, 0x33, 0x7, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x6d, 0x40}}, 0x40) 03:44:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @vbi={0x0, 0x0, 0x34324152}}) 03:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x40}}, 0x0) 03:44:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x405c5503, &(0x7f0000000140)) 03:44:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x5, 0x2, 0x0, 0x1}, 0x48) 03:44:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x206dfe}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) 03:44:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x1b, 0x5b, 0x33, 0x7, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x6d, 0x40}}, 0x40) 03:44:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @vbi={0x0, 0x0, 0x34324152}}) 03:44:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x405c5503, &(0x7f0000000140)) 03:44:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x5, 0x2, 0x0, 0x1}, 0x48) 03:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x40}}, 0x0) 03:44:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x802) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0xffffffffffffffff) 03:44:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @vbi={0x0, 0x0, 0x34324152}}) 03:44:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x5, 0x2, 0x0, 0x1}, 0x48) 03:44:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 03:44:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x405c5503, &(0x7f0000000140)) 03:44:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x802) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0xffffffffffffffff) 03:44:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:44:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 03:44:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x5, 0x2, 0x0, 0x1}, 0x48) 03:44:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x405c5503, &(0x7f0000000140)) 03:44:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x802) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0xffffffffffffffff) 03:44:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:44:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 03:44:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:44:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x802) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0xffffffffffffffff) 03:44:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:44:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 03:44:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x96000) 03:44:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:44:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 03:44:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:44:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x96000) 03:44:35 executing program 0: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) 03:44:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) write$binfmt_script(r0, 0x0, 0xb) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x10002440}]}, 0x48}}, 0x0) 03:44:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0a61fdac"}, 0x0, 0x1, {0x0}}) [ 1684.502943][T27600] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 03:44:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:44:35 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0a61fdac"}, 0x0, 0x1, {0x0}}) 03:44:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x96000) 03:44:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) write$binfmt_script(r0, 0x0, 0xb) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x10002440}]}, 0x48}}, 0x0) 03:44:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x109e, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1684.901159][T27616] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1684.990175][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 1684.990240][ T24] audit: type=1326 audit(1655437476.043:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27617 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 03:44:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0a61fdac"}, 0x0, 0x1, {0x0}}) [ 1685.020991][ T24] audit: type=1326 audit(1655437476.053:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27617 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 [ 1685.044511][ T24] audit: type=1326 audit(1655437476.063:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27617 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 [ 1685.067834][ T24] audit: type=1326 audit(1655437476.063:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27617 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 [ 1685.093840][ T24] audit: type=1326 audit(1655437476.063:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27617 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 03:44:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580), 0x1) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)=ANY=[], &(0x7f0000000140)=0x8) 03:44:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x96000) 03:44:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) write$binfmt_script(r0, 0x0, 0xb) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x10002440}]}, 0x48}}, 0x0) 03:44:36 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x109e, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:36 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0a61fdac"}, 0x0, 0x1, {0x0}}) 03:44:36 executing program 0: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) [ 1685.490551][T27622] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1685.514076][ T24] audit: type=1326 audit(1655437476.573:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27625 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 03:44:36 executing program 5: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) [ 1685.627719][ T24] audit: type=1326 audit(1655437476.593:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27625 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 [ 1685.652264][ T24] audit: type=1326 audit(1655437476.603:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27625 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 03:44:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) write$binfmt_script(r0, 0x0, 0xb) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x10002440}]}, 0x48}}, 0x0) [ 1685.675774][ T24] audit: type=1326 audit(1655437476.603:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27625 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 [ 1685.701035][ T24] audit: type=1326 audit(1655437476.603:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27625 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778fa89109 code=0x7ffc0000 03:44:36 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x109e, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:44:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x38, 0x0, 0x0, @binary}]}, @typed={0x15, 0x9, 0x0, 0x0, @binary="883de66ced3405bb4e8132648aa87bbb3d"}]}, 0x38}}, 0x0) 03:44:36 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) [ 1685.939278][T27639] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 1685.975525][T27644] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1685.983996][T27644] openvswitch: netlink: Key type 56 is out of range max 32 03:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x38, 0x0, 0x0, @binary}]}, @typed={0x15, 0x9, 0x0, 0x0, @binary="883de66ced3405bb4e8132648aa87bbb3d"}]}, 0x38}}, 0x0) 03:44:37 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 03:44:37 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x109e, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1686.222091][T27650] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1686.231360][T27650] openvswitch: netlink: Key type 56 is out of range max 32 03:44:37 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 03:44:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x19, &(0x7f0000000000)=0x2, 0x8) 03:44:37 executing program 0: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) 03:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x38, 0x0, 0x0, @binary}]}, @typed={0x15, 0x9, 0x0, 0x0, @binary="883de66ced3405bb4e8132648aa87bbb3d"}]}, 0x38}}, 0x0) [ 1686.665707][T27661] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1686.674149][T27661] openvswitch: netlink: Key type 56 is out of range max 32 03:44:37 executing program 5: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) 03:44:37 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324241}}) 03:44:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x19, &(0x7f0000000000)=0x2, 0x8) 03:44:37 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 03:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x38, 0x0, 0x0, @binary}]}, @typed={0x15, 0x9, 0x0, 0x0, @binary="883de66ced3405bb4e8132648aa87bbb3d"}]}, 0x38}}, 0x0) [ 1686.857207][T27669] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1686.866002][T27669] openvswitch: netlink: Key type 56 is out of range max 32 03:44:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324241}}) 03:44:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5393, &(0x7f0000001180)={{r0}, 0x0, 0x0, @unused=[0x40000, 0x0, 0xffffffffffff0002], @name="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"}) 03:44:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x19, &(0x7f0000000000)=0x2, 0x8) 03:44:38 executing program 3: capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000000)) ioprio_set$pid(0x3, 0x0, 0x0) 03:44:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x19, &(0x7f0000000000)=0x2, 0x8) 03:44:38 executing program 0: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) 03:44:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5393, &(0x7f0000001180)={{r0}, 0x0, 0x0, @unused=[0x40000, 0x0, 0xffffffffffff0002], @name="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"}) 03:44:38 executing program 5: syz_io_uring_setup(0x598e, &(0x7f0000000100), &(0x7f0000816000/0x1000)=nil, &(0x7f0000b13000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r1, &(0x7f0000000180)=""/128, 0x80) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000039e000/0x2000)=nil, 0x2000}) 03:44:38 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324241}}) 03:44:38 executing program 3: capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000000)) ioprio_set$pid(0x3, 0x0, 0x0) 03:44:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x13ec, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x58, {0x58, 0x0, "dc7c87811f332d55fe9150140780f8403071a31e763502ada8d066c53d77f791812c45fef2c276f3a5e5d4f1fbcd7c91b55832a953ac4d8583bfd99a114fda856d4478b7adf17de696914135cde27e60c044541576d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:44:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5393, &(0x7f0000001180)={{r0}, 0x0, 0x0, @unused=[0x40000, 0x0, 0xffffffffffff0002], @name="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"}) 03:44:38 executing program 3: capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000000)) ioprio_set$pid(0x3, 0x0, 0x0) 03:44:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5393, &(0x7f0000001180)={{r0}, 0x0, 0x0, @unused=[0x40000, 0x0, 0xffffffffffff0002], @name="33d4bbdae1fdf5c66d937ecc8ecf871d6c6ad2a785d54640f5fb3bebce737f1f2869f0cf7f02f8cea3a6f8a573d35b270b75dcb6e32909af8739ddfdd536ca6c7aaddd5adab8454a4e63b073773728ab23e5bea88e62becf1cf157acdd64fec366fec69d138e20201f63aff8f04af310162fe1c04c18053c811faf3fe4577811a9a49a502e7701d9c37c8d7ffc415152579d5671973d41b99fd2c295829f10a16fffca1cd7bd28fa6978d221d3968938cd8e01678d375315cf0419f1e653c70d62bfe79d9322652cddeb2bdb7b75e3d41fe9d75c88265cff3c10e57db14f619c6196fb064490c7b54e27ac86f3762693f0cd7c1e1c90ed76ff0ab83f51455e1b3e07e15f79adc861af73837e8f5d73a3c7ab9f704b055ace016ac75c148b178c355f6e1f67548b7afd05f50fdb392d38dbe937a843050e2551f8070c5166c93f42a9b89fe9cc1bb660a3f9ff78b12d465094d06b3eb2d9afd89d08e4d1e8e2faef7285e0dae9b858c3f5bed18dc30288331a302f7929e16fc9740fe83ebf02ecd8c00132b3244a07f1ab5f93bcd3c58b52c5ae171f3d925373f9befc6d7e865002429585a389bc3cde3cd34408a852be18b8672822da7fbba154ee6a7cf3ae76460ab1c3d0e04fdf86c76edff580a9333810eee3bc8fafa9ad51314472d5f8dc0fae0b4389b6fe83bbe6c3cd53458c052310375d1341380def455abf761b46a463935e04272dccb07ad704566c4babb79894bf0f253e13b4df8a2b47610d371b3ef30048765913fcfcc5fbcc04550062f535d177bf01ceb4609110f99c70e92186506f2771ca58edee9377b5da59ae230cbd274e38cd8161cd4408da8c56bd283ae56dc0cca85d3877ec5eaea10cc5fa57d6c028d5edfc3c97d5e9ec9a21e90c9b5ff9df2f895b14736b593ded968c0bd5a0285f8a9674bbfe97df7ca41b3673de381c1621122472ccb883d02ac80bb4b2c7296003b438c765220ed809e59253d8d2601c5bbe6972263bd02d86c4274f79661fa280ca709e557d7c466c64e6fc05ee2c0e1b3c3ba286c1672d550053133364fbec3c7b429bb494c8eba933590e9e6b39d7bb6daf297b91b91a7725dfeea170f14735813d4fc4c508dc96c2a998b239fa45d83d0e6124a94bee422be8f02f7254ee08ad77cdbf19d1623efb8c272868b0e9d43a2c0860711206124efc76ceac2e7353929c83cb94a01d65a3e3f388a804d51557235a3d6dfb3ae8ce44a0e38f7f032de4124e349fe13b5367612cb553ffe2ab4a40bbb76d6bd1ee1bdcdd9fa50c671263454c58067cb06486f6cfb6a5ff0ed6ebdab1b0be16c85de4a46a8e0f6895400282eee7dca0c28f2db5e374b4f9dd854dbc2a73c5b6caabcf70e41887e97f59ee11dd6ce4373dac0c142a910eecc32b3d074eda29c184eebf23ffb46c174fe99af7ddf6742ce42004779a1ee428cbcd8b5ac8622373be6c5367911e8c4ff6666a175d7aacd52bef6f01ee9cadb47afe3404f83688925b2223c7cda8e9971a86114bfda77e68c20a89cf4b848e767c1cd45df2a4c36f3dade9da11c46b00b76d21ca91e6ff735411e105950b8ebb53b167477c0ef7db012a9dbf21e788f07b2e28532020393a008fe9303ad6b5063f04fc9873df45987eac3c88e77c257b71ac04372e4f2f22462b9d3fe99bc6f3443593c4129061e1080722af30b42366cbb73423529d0e6db7d523dffb404e373d833c3f1ac3d1c83ee4793951436d932967e0623095cd02a46138da458541e77316cda910744b60dc3a8d503448c5fb1e4419f8079416c3a3a025330237d08339620d0dc3957a4457ad2bb8296147452b800653c0eb71fb7ca3fea640647fa8aab4d0dd3d984ada5bef17be7b55bb4f35446ed25a76b3ceffc0081fcdbbd5f8b24bc2b4d1bf0fac9ec35d9d02b07f7bb2f75e7012866daf197106f7787cfd42bb241c4a45229f19ea7af0cfa706fcd5f1d5eeb70c4116d472c4d436725be1cdc9b83c8978c96c277c2c78d960ac2ba40fec7cc9588cb0a7d77a3964b14f2d0f50abd80c98a06235359428140e96ca3947d7d11790a7307e47acea1537d9b9f97b22da8f61bf9949558619c4c28ac0526521968a74b9a40c1ca645a6efa542503e73a79c1a9d019ff1c03e1579eb91a8f9d75b190217f0fcc563305c07d948d3d2091fcaa8c6abde2188448fc1119f66c33be5fbf49f353dd484620f2cde5b0aca793c30c785a13ba74b13e3bfc84dff0299c5ad4921d088866803414f89417f7b724cbdad833838bdbee307d339d324e14d439fab46ebf3cdc23af8bbe7d94b483d5227d236fa2b1b6dd9981605cbf3a9263b7ac5f2f7cb085a7cdf6b54bb76d425d9e7ee95d472f6958ca1de5bf2f054db043a31f7312e3106fcc35eee22a7c0e34a6f6e1bfcee55c1544a281c50e47c727669f29714b646169abd1f9c511eebae1f4d25878332a9e46b0cfcc0ca3427a376faaf9afa9ad93eb7549b7891ff5661ba096ab95223b9582f2d221521b3fc42abd6eb49c048ca8eff28b140dfd6dd8d9c6eaa64f8f903e81261112b40138a062d7167b73363b4446740d01049dce9007affbec56874214ebeb4529a71858caadb6cc69582adc213b9388a15855fc3946a5351c347dcd9e3f2e63fa3bc0c87ee5a0634258b42a0f87a645a032c05cb4f911212443276ce19141afc95ad76a77903781310cc53ba2018f73427a3f0bb42f7345da163d333feb4595db453a53b168fd5fa40a3f0f28fa3ff74dd69d49e1f535cf5dbcb165f5bb9cdc7265f0c0999bcbb8b92b1ff3136e641c41b7243f3da652b8f3b5bf5f67d1bdd68de8d94ed642defc31cc276c651181700c61da0ebd32b12961b612a9df2bde07d4f24715fd54f43774d7ef6dcf3a30dbe7b7926aeafa42d16dae23fa5eefd493bcb24bb3665958e31010089e9cd092acb9062aefe808befb963d2851a67f4ae5994eab0f93446f50ac8347906dbf69f44faa8a99971e945ec12914710f370c012d2e85869e25e121afda168641d73b3f7df0a7f476cea4fa66a6360c70307a742b528f67f08805898b480d9c2e2fdd3e24a95af0f6d264d9ae39952bbbe61688175a61f6307ffa5b796da21921706889230d935f27eb63a1ce63470b22c885ee64e28b212f0462693ef07e68439f3cfd2921a0832451382ae835dba59ad1551967f924668cdc154c063ae518b821ffa395acfe26ff19e5ee6f54af37cc2157606226ddd8435429a2e9309b6ebf13de5fdcd34a1e3d53e42db8b04c50d77b0c2a90f9965d5cdfdc9b4990d8b2411fafa0a05004b5ead6045292b9bd9c8a121a4a25c90b810b88af5a80b868cde4a9517c37a48e6f2a40a323fcb10ff080503a7df23d0863635e093a9e50b9430235482eb52e6735e9654c6ca4e6055adcb5e43c440bcf47fc26ba8150fdf84ae86b75a41b33bb4a15a7546ed20fa1dbae93c66d4920baa7f524248e21c915b6674f7ec7d06d56ab3ce5b5168ff72b30485fd462b4f3c60234c85eb60a729d5692d91e2611253f402a303596ac566d6009953f0657f09c18235d626927ad718da72a44a7839704d8860011ff52437e1503fdb7dae8d000bf9ffc7989f8ae63d8320c1895470f70cfcd8923876f9aa6912a5be040b5cd93d3aa091cad48d8b36fcf3b875de1b538d3f3bf98d05108f030940ef63d9989aeeaf8c9c2461eba2622be1b8226abffd7b8b3bcb20100a35247f9b2a1267e8eca7bb42e88280bdc2edf2ab13c123594a7e36da62f66e8b25b0832d6d8f4d0f0d1cd8f42585c7cad84a23b6f629d426efba740ab1240be894faeca33410ee2b6334e9e850800f219a01f9b08881607d3ba41b68972f5a7364a14fd63509bf665e3e4d12e1764e0967d7d17739f42536cf84cc0d9c2c55c307f0d871d4d3988909d2fc82fc9b0dea9f29b9fd6c363afa2f182fa982580a2bcc93d73cda25bf1f59d3548805b9b5cf46caf857c86ead87c2f28aaf39e47fd3fb99690b7ea8d87d2209fd43ff25287ddf2ea20575919726650c834d223f4e3247e4e312444ef47062bc5a008fb9f0b4621b86283a08bda87a0adf4eeb8219acdf1f254058bf45d89d82b1ced6fab41ac02116bc8127e09c89cf7dfa84c40d8583cf64a26ebcd1bcbe204c34a417907b174ac17e2877954e5b6cc9393a4eb063a4a0eb455a988565deff73fe005a309274734481baf78b371156d8f41b8f4b1f20a206fc5868a5310472dafcfc4014650894c5a358205ba5d9bdd4a1d8abc4af5f15a32fbbfd34e12a4f4737b6b13c3448b67690cb1687d33eaa2d71c8e9bc08085913f56341c846a5af6b72f164749b873208cf28582c94890ca2b0da6db828834a4ff59df4beeae7e63f0f9a9a8ba8a964c6faede0bb2c7124ad009c6aeb8f54e0c7f6f6da10a0e8e7424173b5b9254b2257875cbd8864bdea1c5b2085de2895b35b62a5e8b6beb37309a7e78a0d00e9623fe6caac2f3ce49a5b44064cf35e8393c6d5c18d83badac3700ec5595199bb7fc21d184cd82449fe5b45c1aa27207e208ab0e1010f2f3c0bf8655d9b3953c6cf81a468c45883e16a3b3f1f116466b6f30e6e9322e077decd98c1769c4d0d0d124e1abe7bc2efb03a4d3df26acc39168bc23233a63069c1b2b2fa26a0769cf983cb99589023239b9e5af95cc299d12e3459aaa1ba41eb0728937ef2d80a560901099b77c4be04eac11702a14cd8d83dd6093dd8e7bf8bd3d61e83262877200054c288eac32a8d6fb3f4db3cf05d939881d69bce866ac4ff6ea6a99ca9558ab80ddd342c30d540b91790c4997de186b8235e32ad1bdde13812732214d65424f28e0a23d0536f78b03d23438b665e0899536ebe8fa2295146e1dd5a6a2ecad38c26d93b6258b3e8c65d11934e138c987e9f91076b0cbd3ae0a4feeaffb25e8a3b0549c4d99eaa89391c5ae3e877481972eb10da63ad9df60692381139d32b2587cdb0909674be69475cc71d858421d0dd71b5bcd690388110fc6ef25483e5e384d709eaa9c8f58cd58becec48d7041b3ce5c92632def501230f9d5a548d540e4473b514a22cf15341e01cae0e3df72bf910fe61041cf5c276c5bd1442b6b1e06c027a625e348d9949a877f72eead8d736a3837d851fa454dcb7ebaa8c7825a54a0f12a2b15559a96f2ddf6f9358b25de3cc034175f4767bef248982290e1968b9c0f2878adab066eedac34d90cdffd86f4184a8178e3e575eef4dbddd170e076d604e5c9e4ace9b76f4e279c555bd1eb4541dcf1677f89bd0089e84480838d7bad526edc5f4717a25fdff1f70dddaf43d9667efac8f5c5dfd43c3416ef577317cb1d1da8692e9819061d73e5e2d31aef84ea2711d1a2e982db76b8c76d61ddd509f8ecd09afb5817f6b41309c7ca464040e88eaecb8f83197cef04988822acaebbe8931eb8a61d66c5e4ebc6bb9f30b0153e2493783a3d020daa1924a5b4b043e482abcddc60ca5fcc302b07e0ff0c86b2e34ad098e9e4e4bfba29e97a587d15b013cdb0ea84340f336b0486c264954d9a4bab35cf34160d102abd2479eafbc5fed677a0533f9613c07262ace01e6563fc3fecb6f4965833d0d5ee97608eeff2c31c96f6c411cad0b53cb89ad3aaaa78943fb1ce2080ece0900"}) 03:44:39 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324241}}) 03:44:39 executing program 3: capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000000)) ioprio_set$pid(0x3, 0x0, 0x0) [ 1688.088319][T10571] usb 3-1: new high-speed USB device number 115 using dummy_hcd 03:44:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 03:44:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/231, &(0x7f0000003540)=0xe7) 03:44:39 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x10d, 0xa, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) [ 1688.462883][T10571] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1688.474678][T10571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.485940][T10571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.495952][T10571] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1688.509236][T10571] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1688.518659][T10571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.565303][T10571] usb 3-1: config 0 descriptor?? 03:44:39 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000180)) 03:44:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x300, 0x12, 0x1f}) 03:44:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) [ 1689.072289][T10571] zydacron 0003:13EC:0006.005B: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 1689.270736][T10571] usb 3-1: USB disconnect, device number 115 03:44:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x13ec, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x58, {0x58, 0x0, "dc7c87811f332d55fe9150140780f8403071a31e763502ada8d066c53d77f791812c45fef2c276f3a5e5d4f1fbcd7c91b55832a953ac4d8583bfd99a114fda856d4478b7adf17de696914135cde27e60c044541576d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:44:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 03:44:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/231, &(0x7f0000003540)=0xe7) 03:44:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x300, 0x12, 0x1f}) 03:44:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 03:44:40 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000180)) 03:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/231, &(0x7f0000003540)=0xe7) 03:44:41 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000180)) 03:44:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x300, 0x12, 0x1f}) 03:44:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) 03:44:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 03:44:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/231, &(0x7f0000003540)=0xe7) [ 1690.264672][ T125] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1690.632593][ T125] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1690.643918][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.655178][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.665397][ T125] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1690.678760][ T125] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1690.688096][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.700313][ T125] usb 3-1: config 0 descriptor?? [ 1691.190465][ T125] zydacron 0003:13EC:0006.005C: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 1691.392212][ T125] usb 3-1: USB disconnect, device number 116 03:44:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x13ec, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x58, {0x58, 0x0, "dc7c87811f332d55fe9150140780f8403071a31e763502ada8d066c53d77f791812c45fef2c276f3a5e5d4f1fbcd7c91b55832a953ac4d8583bfd99a114fda856d4478b7adf17de696914135cde27e60c044541576d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:44:42 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000180)) 03:44:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x300, 0x12, 0x1f}) 03:44:42 executing program 4: io_uring_setup(0x6c44, &(0x7f00000000c0)={0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:44:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 03:44:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000140)=""/195, 0x12c000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1691.992695][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 1691.992818][ T24] audit: type=1326 audit(1655437483.043:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27746 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 03:44:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6, 0x5, {0x40}}]}, 0x40}}, 0x0) 03:44:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) 03:44:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000140)=""/195, 0x12c000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1692.103017][ T24] audit: type=1326 audit(1655437483.093:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27746 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7fef18c3bd4b code=0x0 03:44:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 1692.225494][T27761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) 03:44:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6, 0x5, {0x40}}]}, 0x40}}, 0x0) [ 1692.446616][T14024] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1692.549413][T27771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1692.842584][T14024] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1692.853981][T14024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.867273][T14024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.877702][T14024] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1692.891050][T14024] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1692.900354][T14024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.917475][T14024] usb 3-1: config 0 descriptor?? [ 1693.411790][T14024] zydacron 0003:13EC:0006.005D: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 1693.617573][T10571] usb 3-1: USB disconnect, device number 117 03:44:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x13ec, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x58, {0x58, 0x0, "dc7c87811f332d55fe9150140780f8403071a31e763502ada8d066c53d77f791812c45fef2c276f3a5e5d4f1fbcd7c91b55832a953ac4d8583bfd99a114fda856d4478b7adf17de696914135cde27e60c044541576d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:44:45 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) 03:44:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000140)=""/195, 0x12c000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1694.502830][T14024] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1694.872478][T14024] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1694.883734][T14024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.894992][T14024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.904987][T14024] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 03:44:46 executing program 4: io_uring_setup(0x6c44, &(0x7f00000000c0)={0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:44:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) 03:44:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6, 0x5, {0x40}}]}, 0x40}}, 0x0) 03:44:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000140)=""/195, 0x12c000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 03:44:46 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) [ 1694.920344][T14024] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1694.930123][T14024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.942783][T14024] usb 3-1: config 0 descriptor?? [ 1695.077027][T27785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0) 03:44:46 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) [ 1695.167871][ T24] audit: type=1326 audit(1655437486.223:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27786 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 03:44:46 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x3, 0x0, 0x20000000) [ 1695.270819][ T24] audit: type=1326 audit(1655437486.273:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27786 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7fef18c3bd4b code=0x0 [ 1695.293376][ C1] vkms_vblank_simulate: vblank timer overrun 03:44:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6, 0x5, {0x40}}]}, 0x40}}, 0x0) [ 1695.480512][T14024] zydacron 0003:13EC:0006.005E: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 1695.575887][T27797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1695.661787][T14024] usb 3-1: USB disconnect, device number 118 03:44:47 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) 03:44:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 03:44:47 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x3, 0x0, 0x20000000) [ 1696.277451][T27804] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:49 executing program 4: io_uring_setup(0x6c44, &(0x7f00000000c0)={0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:44:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x3, 0x0, 0x20000000) 03:44:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 03:44:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast1, @private2, [], [], 'rose0\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 03:44:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0x0, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresgid(&(0x7f0000000a00), 0x0, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:44:49 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800210000000000000000001c140000fe000001000000000a00120002"], 0x28}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1698.216143][T27815] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast1, @private2, [], [], 'rose0\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 03:44:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) [ 1698.300509][ T24] audit: type=1326 audit(1655437489.353:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27816 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 03:44:49 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x3, 0x0, 0x20000000) 03:44:49 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800210000000000000000001c140000fe000001000000000a00120002"], 0x28}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1698.385110][ T24] audit: type=1326 audit(1655437489.403:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27816 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7fef18c3bd4b code=0x0 03:44:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007fb5c540ca0768a801af000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1698.548883][T27827] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) [ 1698.850953][T27835] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1698.983894][T14841] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1699.002710][T27818] not chained 390000 origins [ 1699.010182][T27818] CPU: 1 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1699.020392][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.030483][T27818] Call Trace: [ 1699.033785][T27818] [ 1699.036736][T27818] dump_stack_lvl+0x200/0x28c [ 1699.041474][T27818] dump_stack+0x29/0x2c [ 1699.045681][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1699.051471][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.056634][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.062493][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.067662][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.073532][T27818] ? should_fail+0x79/0x9c0 [ 1699.078064][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.083240][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1699.089531][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1699.095659][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.100799][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.106644][T27818] __msan_chain_origin+0xbd/0x140 [ 1699.111725][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.116485][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.121653][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.127503][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.132671][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.138519][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.143100][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.148273][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1699.153531][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.158612][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1699.164928][T27818] do_syscall_64+0x3d/0xb0 [ 1699.169392][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.175347][T27818] RIP: 0033:0x7f2a7a289109 [ 1699.179800][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1699.199447][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1699.207939][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1699.215955][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1699.223963][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1699.231969][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1699.240008][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1699.248038][T27818] [ 1699.251893][T27818] Uninit was stored to memory at: [ 1699.257101][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.261835][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.266496][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.271578][T27818] do_syscall_64+0x3d/0xb0 [ 1699.276131][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.282217][T27818] [ 1699.284552][T27818] Uninit was stored to memory at: [ 1699.289621][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.294438][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.298994][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.304244][T27818] do_syscall_64+0x3d/0xb0 [ 1699.308702][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.314763][T27818] [ 1699.317103][T27818] Uninit was stored to memory at: [ 1699.322294][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.327025][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.331566][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.336792][T27818] do_syscall_64+0x3d/0xb0 [ 1699.341257][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.347356][T27818] [ 1699.349686][T27818] Uninit was stored to memory at: [ 1699.354885][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.359615][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.364289][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.369366][T27818] do_syscall_64+0x3d/0xb0 [ 1699.373975][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.379922][T27818] [ 1699.382441][T27818] Uninit was stored to memory at: [ 1699.387546][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.392432][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.396992][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.402211][T27818] do_syscall_64+0x3d/0xb0 [ 1699.406678][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.412793][T27818] [ 1699.415126][T27818] Uninit was stored to memory at: [ 1699.420222][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.425048][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.429605][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.434847][T27818] do_syscall_64+0x3d/0xb0 [ 1699.439308][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.445416][T27818] [ 1699.447751][T27818] Uninit was stored to memory at: [ 1699.452992][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.457716][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.462421][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.467500][T27818] do_syscall_64+0x3d/0xb0 [ 1699.472083][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.478021][T27818] [ 1699.480346][T27818] Local variable msg_sys created at: [ 1699.485779][T27818] do_recvmmsg+0xc9/0x1200 [ 1699.490258][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.741777][T27818] not chained 400000 origins [ 1699.746507][T27818] CPU: 1 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1699.756707][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.766796][T27818] Call Trace: [ 1699.770095][T27818] [ 1699.773032][T27818] dump_stack_lvl+0x200/0x28c [ 1699.777769][T27818] dump_stack+0x29/0x2c [ 1699.781962][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1699.787746][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.792893][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.798762][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.803929][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.809799][T27818] ? should_fail+0x79/0x9c0 [ 1699.814345][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.819512][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1699.825809][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1699.831930][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.837096][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.842964][T27818] __msan_chain_origin+0xbd/0x140 [ 1699.848039][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1699.852770][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.857933][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.863798][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.868964][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1699.874839][T27818] do_recvmmsg+0x6b7/0x1200 [ 1699.879410][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1699.884582][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1699.889840][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1699.894905][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1699.901302][T27818] do_syscall_64+0x3d/0xb0 [ 1699.905750][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1699.911692][T27818] RIP: 0033:0x7f2a7a289109 [ 1699.916137][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1699.935796][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1699.944263][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1699.952271][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1699.960275][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1699.968293][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1699.976277][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1699.984298][T27818] [ 1699.990735][T27818] Uninit was stored to memory at: [ 1699.996368][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.001112][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.005760][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.010840][T27818] do_syscall_64+0x3d/0xb0 [ 1700.015402][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.021349][T27818] [ 1700.023826][T27818] Uninit was stored to memory at: [ 1700.028922][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.033827][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.038393][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.043629][T27818] do_syscall_64+0x3d/0xb0 [ 1700.048093][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.054179][T27818] [ 1700.056516][T27818] Uninit was stored to memory at: [ 1700.061663][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.066542][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.071114][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.076311][T27818] do_syscall_64+0x3d/0xb0 [ 1700.080793][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.086862][T27818] [ 1700.089198][T27818] Uninit was stored to memory at: [ 1700.094438][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.099164][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.103870][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.108952][T27818] do_syscall_64+0x3d/0xb0 [ 1700.113562][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.119499][T27818] [ 1700.121830][T27818] Uninit was stored to memory at: [ 1700.127059][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.131818][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.136500][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.141589][T27818] do_syscall_64+0x3d/0xb0 [ 1700.146257][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.152293][T27818] [ 1700.154632][T27818] Uninit was stored to memory at: [ 1700.159728][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.164612][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.169179][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.174420][T27818] do_syscall_64+0x3d/0xb0 [ 1700.178887][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.184989][T27818] [ 1700.187334][T27818] Uninit was stored to memory at: [ 1700.192586][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.197311][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.201863][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.207058][T27818] do_syscall_64+0x3d/0xb0 [ 1700.211518][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.217628][T27818] [ 1700.219959][T27818] Local variable msg_sys created at: [ 1700.225398][T27818] do_recvmmsg+0xc9/0x1200 [ 1700.229873][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.342633][T14841] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=af.01 [ 1700.351887][T14841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.375185][T14841] usb 2-1: config 0 descriptor?? [ 1700.444401][T14841] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1700.487352][T27818] not chained 410000 origins [ 1700.492421][T27818] CPU: 0 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1700.502623][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.512704][T27818] Call Trace: [ 1700.515995][T27818] [ 1700.518946][T27818] dump_stack_lvl+0x200/0x28c [ 1700.523664][T27818] dump_stack+0x29/0x2c [ 1700.527865][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1700.533653][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.538818][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1700.544666][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.549831][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1700.555682][T27818] ? should_fail+0x79/0x9c0 [ 1700.560223][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.565365][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1700.571645][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1700.577768][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.582908][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1700.588750][T27818] __msan_chain_origin+0xbd/0x140 [ 1700.593835][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.598590][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.603757][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1700.609623][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.614781][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1700.620650][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.625223][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1700.630403][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1700.635659][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.640716][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1700.647004][T27818] do_syscall_64+0x3d/0xb0 [ 1700.651470][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.657413][T27818] RIP: 0033:0x7f2a7a289109 [ 1700.661853][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1700.681506][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1700.689939][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1700.697923][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1700.705907][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1700.713904][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1700.721888][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1700.729914][T27818] [ 1700.735658][T27818] Uninit was stored to memory at: [ 1700.740765][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.745957][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.750531][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.755728][T27818] do_syscall_64+0x3d/0xb0 [ 1700.760188][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.766252][T27818] [ 1700.768586][T27818] Uninit was stored to memory at: [ 1700.773778][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.778514][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.783194][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.788275][T27818] do_syscall_64+0x3d/0xb0 [ 1700.792857][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.798792][T27818] [ 1700.801128][T27818] Uninit was stored to memory at: [ 1700.806346][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.811074][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.815760][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.820840][T27818] do_syscall_64+0x3d/0xb0 [ 1700.825432][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.831373][T27818] [ 1700.833798][T27818] Uninit was stored to memory at: [ 1700.838893][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.843782][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.848348][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.853611][T27818] do_syscall_64+0x3d/0xb0 [ 1700.855270][T14841] dvb-usb: bulk message failed: -22 (1/0) [ 1700.858069][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.858124][T27818] [ 1700.872261][T27818] Uninit was stored to memory at: [ 1700.877358][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.882351][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.886909][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.892165][T27818] do_syscall_64+0x3d/0xb0 [ 1700.894691][T14841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1700.896649][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.896704][T27818] [ 1700.914296][T27818] Uninit was stored to memory at: [ 1700.919400][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.924310][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.928873][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.934126][T27818] do_syscall_64+0x3d/0xb0 [ 1700.938592][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.944709][T27818] [ 1700.947046][T27818] Uninit was stored to memory at: [ 1700.952306][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1700.957039][T27818] do_recvmmsg+0x6b7/0x1200 [ 1700.961594][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1700.966852][T27818] do_syscall_64+0x3d/0xb0 [ 1700.971330][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1700.975793][T14841] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1700.977453][T27818] [ 1700.986217][T14841] usb 2-1: media controller created [ 1700.988224][T27818] Local variable msg_sys created at: [ 1700.988240][T27818] do_recvmmsg+0xc9/0x1200 [ 1701.003342][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1701.036146][T14841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1701.197737][T14841] DVB: Unable to find symbol lgdt330x_attach() [ 1701.204236][T14841] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1701.272563][T14841] dvb-usb: bulk message failed: -22 (1/0) [ 1701.278522][T14841] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. 03:44:52 executing program 4: io_uring_setup(0x6c44, &(0x7f00000000c0)={0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:44:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast1, @private2, [], [], 'rose0\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 03:44:52 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800210000000000000000001c140000fe000001000000000a00120002"], 0x28}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 03:44:52 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x10}], 0x10}, 0x0, 0x40041}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 1701.323345][T14841] usb 2-1: USB disconnect, device number 80 [ 1701.579179][T14841] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1701.615973][ T24] audit: type=1326 audit(1655437492.673:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef18c89109 code=0x0 [ 1701.695655][T27818] not chained 420000 origins [ 1701.700289][T27818] CPU: 0 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1701.710492][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.712949][ T24] audit: type=1326 audit(1655437492.723:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7fef18c3bd4b code=0x0 [ 1701.720573][T27818] Call Trace: [ 1701.720590][T27818] [ 1701.720606][T27818] dump_stack_lvl+0x200/0x28c [ 1701.720672][T27818] dump_stack+0x29/0x2c [ 1701.720720][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1701.763670][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.768839][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1701.774728][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.779891][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1701.785752][T27818] ? should_fail+0x79/0x9c0 [ 1701.790294][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.795450][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1701.801741][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1701.807856][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.813014][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1701.818867][T27818] __msan_chain_origin+0xbd/0x140 [ 1701.823934][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1701.828678][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.833835][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1701.839690][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.844846][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1701.850705][T27818] do_recvmmsg+0x6b7/0x1200 [ 1701.855267][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1701.860431][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1701.865680][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1701.870760][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1701.877072][T27818] do_syscall_64+0x3d/0xb0 [ 1701.881550][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1701.887502][T27818] RIP: 0033:0x7f2a7a289109 [ 1701.891951][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1701.911602][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1701.920054][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1701.928051][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1701.936043][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1701.944033][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1701.952025][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1701.960036][T27818] [ 1701.965956][T27818] Uninit was stored to memory at: [ 1701.971059][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1701.978141][T27818] do_recvmmsg+0x6b7/0x1200 [ 1701.983055][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1701.988144][T27818] do_syscall_64+0x3d/0xb0 [ 1701.992738][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1701.998690][T27818] [ 1702.001046][T27818] Uninit was stored to memory at: [ 1702.006295][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.011025][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.015722][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.020808][T27818] do_syscall_64+0x3d/0xb0 [ 1702.025402][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.031360][T27818] [ 1702.033806][T27818] Uninit was stored to memory at: [ 1702.038914][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.043784][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.048341][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.053606][T27818] do_syscall_64+0x3d/0xb0 [ 1702.058095][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.064260][T27818] [ 1702.066602][T27818] Uninit was stored to memory at: [ 1702.071716][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.076647][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.081231][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.086499][T27818] do_syscall_64+0x3d/0xb0 [ 1702.090957][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.097033][T27818] [ 1702.099372][T27818] Uninit was stored to memory at: [ 1702.104626][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.109376][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.114122][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.119226][T27818] do_syscall_64+0x3d/0xb0 [ 1702.123880][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.129840][T27818] [ 1702.132355][T27818] Uninit was stored to memory at: [ 1702.137485][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.142409][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.146983][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.152251][T27818] do_syscall_64+0x3d/0xb0 [ 1702.156718][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.162838][T27818] [ 1702.165188][T27818] Uninit was stored to memory at: [ 1702.170288][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.175207][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.179775][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.185010][T27818] do_syscall_64+0x3d/0xb0 [ 1702.189492][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.195608][T27818] [ 1702.197945][T27818] Local variable msg_sys created at: [ 1702.203400][T27818] do_recvmmsg+0xc9/0x1200 [ 1702.207867][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.402539][T27818] not chained 430000 origins [ 1702.407251][T27818] CPU: 0 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1702.417463][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.427530][T27818] Call Trace: [ 1702.430822][T27818] [ 1702.433754][T27818] dump_stack_lvl+0x200/0x28c [ 1702.438462][T27818] dump_stack+0x29/0x2c [ 1702.442638][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1702.448396][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.453538][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1702.459382][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.464527][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1702.470404][T27818] ? should_fail+0x79/0x9c0 [ 1702.474942][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.480087][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1702.486369][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1702.492476][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.497639][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1702.503479][T27818] __msan_chain_origin+0xbd/0x140 [ 1702.508531][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.513261][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.518429][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1702.524394][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.529538][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1702.535380][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.539930][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1702.545075][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1702.550310][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.555370][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1702.561651][T27818] do_syscall_64+0x3d/0xb0 [ 1702.566104][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.572052][T27818] RIP: 0033:0x7f2a7a289109 [ 1702.576490][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1702.596133][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1702.604583][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1702.612590][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1702.620587][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1702.628580][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1702.636557][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1702.644553][T27818] [ 1702.650170][T27818] Uninit was stored to memory at: [ 1702.655815][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.660542][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.665222][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.670302][T27818] do_syscall_64+0x3d/0xb0 [ 1702.674923][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.680862][T27818] [ 1702.683369][T27818] Uninit was stored to memory at: [ 1702.688464][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.693330][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.697878][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.703071][T27818] do_syscall_64+0x3d/0xb0 [ 1702.707531][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.713678][T27818] [ 1702.716013][T27818] Uninit was stored to memory at: [ 1702.721115][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.725982][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.730538][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.735780][T27818] do_syscall_64+0x3d/0xb0 [ 1702.740243][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.746353][T27818] [ 1702.748686][T27818] Uninit was stored to memory at: [ 1702.753894][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.758616][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.763339][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.768416][T27818] do_syscall_64+0x3d/0xb0 [ 1702.773065][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.779005][T27818] [ 1702.781339][T27818] Uninit was stored to memory at: [ 1702.786566][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.791291][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.796018][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.801111][T27818] do_syscall_64+0x3d/0xb0 [ 1702.805763][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.811702][T27818] [ 1702.814185][T27818] Uninit was stored to memory at: [ 1702.819266][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.824145][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.828705][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.833957][T27818] do_syscall_64+0x3d/0xb0 [ 1702.838423][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.844577][T27818] [ 1702.846919][T27818] Uninit was stored to memory at: [ 1702.852180][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1702.856912][T27818] do_recvmmsg+0x6b7/0x1200 [ 1702.861466][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.866683][T27818] do_syscall_64+0x3d/0xb0 [ 1702.871150][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1702.877208][T27818] [ 1702.879543][T27818] Local variable msg_sys created at: [ 1702.884984][T27818] do_recvmmsg+0xc9/0x1200 [ 1702.889457][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1702.906952][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1702.913724][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 [ 1703.081295][T27818] not chained 440000 origins [ 1703.086110][T27818] CPU: 0 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1703.096321][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.106397][T27818] Call Trace: [ 1703.109694][T27818] [ 1703.112626][T27818] dump_stack_lvl+0x200/0x28c [ 1703.117334][T27818] dump_stack+0x29/0x2c [ 1703.121620][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1703.127386][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.132530][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.138391][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.143557][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.149426][T27818] ? should_fail+0x79/0x9c0 [ 1703.153964][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.159131][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1703.165403][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1703.171505][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.176643][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.182482][T27818] __msan_chain_origin+0xbd/0x140 [ 1703.187540][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.192296][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.197460][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.203325][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.208491][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.214367][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.218945][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.224205][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1703.229450][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.234517][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1703.240824][T27818] do_syscall_64+0x3d/0xb0 [ 1703.245281][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.251230][T27818] RIP: 0033:0x7f2a7a289109 [ 1703.255671][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1703.275418][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1703.283860][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1703.291868][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1703.299853][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1703.307859][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1703.315865][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1703.323886][T27818] [ 1703.329481][T27818] Uninit was stored to memory at: [ 1703.335023][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.339756][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.344442][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.349531][T27818] do_syscall_64+0x3d/0xb0 [ 1703.354123][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.360061][T27818] [ 1703.362509][T27818] Uninit was stored to memory at: [ 1703.367600][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.372453][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.377008][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.382207][T27818] do_syscall_64+0x3d/0xb0 [ 1703.386676][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.392742][T27818] [ 1703.395075][T27818] Uninit was stored to memory at: [ 1703.400139][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.405056][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.409633][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.414887][T27818] do_syscall_64+0x3d/0xb0 [ 1703.419350][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.425478][T27818] [ 1703.427814][T27818] Uninit was stored to memory at: [ 1703.433004][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.437727][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.442433][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.447509][T27818] do_syscall_64+0x3d/0xb0 [ 1703.452130][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.458064][T27818] [ 1703.460393][T27818] Uninit was stored to memory at: [ 1703.465607][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.470334][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.475037][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.480120][T27818] do_syscall_64+0x3d/0xb0 [ 1703.484703][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.490639][T27818] [ 1703.493128][T27818] Uninit was stored to memory at: [ 1703.498220][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.503097][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.507658][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.512894][T27818] do_syscall_64+0x3d/0xb0 [ 1703.517351][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.523418][T27818] [ 1703.525754][T27818] Uninit was stored to memory at: [ 1703.530817][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.535703][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.540259][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.545489][T27818] do_syscall_64+0x3d/0xb0 [ 1703.549955][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.556046][T27818] [ 1703.558381][T27818] Local variable msg_sys created at: [ 1703.563833][T27818] do_recvmmsg+0xc9/0x1200 [ 1703.568302][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.759746][T27818] not chained 450000 origins [ 1703.764510][T27818] CPU: 0 PID: 27818 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1703.774743][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.784839][T27818] Call Trace: [ 1703.788132][T27818] [ 1703.791071][T27818] dump_stack_lvl+0x200/0x28c [ 1703.795801][T27818] dump_stack+0x29/0x2c [ 1703.799995][T27818] kmsan_internal_chain_origin+0x78/0x120 [ 1703.805752][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.810891][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.816732][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.821875][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.827749][T27818] ? should_fail+0x79/0x9c0 [ 1703.832296][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.837455][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1703.843743][T27818] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1703.849871][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.855032][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.860868][T27818] __msan_chain_origin+0xbd/0x140 [ 1703.865919][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1703.870638][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.875784][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.881648][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.886819][T27818] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1703.892696][T27818] do_recvmmsg+0x6b7/0x1200 [ 1703.897271][T27818] ? kmsan_get_metadata+0x33/0x220 [ 1703.902443][T27818] ? __x64_sys_recvmmsg+0x165/0x500 [ 1703.907702][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1703.912757][T27818] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1703.919037][T27818] do_syscall_64+0x3d/0xb0 [ 1703.923490][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1703.929430][T27818] RIP: 0033:0x7f2a7a289109 [ 1703.933876][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1703.953524][T27818] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1703.962047][T27818] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1703.970037][T27818] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1703.978030][T27818] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1703.986031][T27818] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1703.994028][T27818] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1704.002032][T27818] [ 1704.007460][T27818] Uninit was stored to memory at: [ 1704.013090][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.017821][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.022502][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.027608][T27818] do_syscall_64+0x3d/0xb0 [ 1704.032191][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.038132][T27818] [ 1704.040466][T27818] Uninit was stored to memory at: [ 1704.045772][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.050527][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.055282][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.060628][T27818] do_syscall_64+0x3d/0xb0 [ 1704.065275][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.071217][T27818] [ 1704.073714][T27818] Uninit was stored to memory at: [ 1704.078796][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.083681][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.088238][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.093482][T27818] do_syscall_64+0x3d/0xb0 [ 1704.097938][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.103979][T27818] [ 1704.106311][T27818] Uninit was stored to memory at: [ 1704.111405][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.116277][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.120833][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.126067][T27818] do_syscall_64+0x3d/0xb0 [ 1704.130628][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.136788][T27818] [ 1704.139125][T27818] Uninit was stored to memory at: [ 1704.144377][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.149103][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.153872][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.158951][T27818] do_syscall_64+0x3d/0xb0 [ 1704.163560][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.169498][T27818] [ 1704.171815][T27818] Uninit was stored to memory at: [ 1704.177035][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.181758][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.186425][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.191505][T27818] do_syscall_64+0x3d/0xb0 [ 1704.196133][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.202164][T27818] [ 1704.204497][T27818] Uninit was stored to memory at: [ 1704.209581][T27818] ___sys_recvmsg+0x73b/0xb40 [ 1704.214491][T27818] do_recvmmsg+0x6b7/0x1200 [ 1704.219134][T27818] __x64_sys_recvmmsg+0x2b3/0x500 [ 1704.224378][T27818] do_syscall_64+0x3d/0xb0 [ 1704.228843][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1704.234990][T27818] [ 1704.237331][T27818] Local variable msg_sys created at: [ 1704.242821][T27818] do_recvmmsg+0xc9/0x1200 [ 1704.247308][T27818] __x64_sys_recvmmsg+0x2b3/0x500 03:44:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0x0, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresgid(&(0x7f0000000a00), 0x0, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:44:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast1, @private2, [], [], 'rose0\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 03:44:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x10}], 0x10}, 0x0, 0x40041}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 03:44:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007fb5c540ca0768a801af000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:44:55 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800210000000000000000001c140000fe000001000000000a00120002"], 0x28}}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 03:44:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x10}], 0x10}, 0x0, 0x40041}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 03:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:44:55 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) 03:44:55 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) [ 1704.694035][ T24] audit: type=1326 audit(1655437495.743:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27863 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3c89109 code=0x0 03:44:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x10}], 0x10}, 0x0, 0x40041}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 1704.752742][T14024] usb 2-1: new high-speed USB device number 81 using dummy_hcd 03:44:56 executing program 0: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='&', 0x1, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) keyctl$setperm(0x5, r0, 0x1000000) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) 03:44:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 1705.105596][T27876] tipc: Started in network mode [ 1705.110693][T27876] tipc: Node identity 9, cluster identity 4711 [ 1705.117315][T27876] tipc: Node number set to 9 [ 1705.184539][T14024] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=af.01 [ 1705.193986][T14024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.249926][T14024] usb 2-1: config 0 descriptor?? [ 1705.300427][T14024] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1705.503091][T14024] dvb-usb: bulk message failed: -22 (1/0) [ 1705.521767][T14024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1705.571208][T14024] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1705.580413][T14024] usb 2-1: media controller created [ 1705.638994][T14024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1705.767404][T27858] not chained 460000 origins [ 1705.772415][T27858] CPU: 1 PID: 27858 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1705.782620][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.792708][T27858] Call Trace: [ 1705.796009][T27858] [ 1705.798957][T27858] dump_stack_lvl+0x200/0x28c [ 1705.803689][T27858] dump_stack+0x29/0x2c [ 1705.807889][T27858] kmsan_internal_chain_origin+0x78/0x120 [ 1705.813682][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.818849][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1705.824747][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.829918][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1705.835789][T27858] ? should_fail+0x79/0x9c0 [ 1705.840337][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.845505][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1705.851808][T27858] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1705.857940][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.863110][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1705.868980][T27858] __msan_chain_origin+0xbd/0x140 [ 1705.874061][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1705.878809][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.884150][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1705.890023][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.895195][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1705.901098][T27858] do_recvmmsg+0x6b7/0x1200 [ 1705.905678][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1705.910872][T27858] ? __x64_sys_recvmmsg+0x165/0x500 [ 1705.916270][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1705.921364][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1705.927687][T27858] do_syscall_64+0x3d/0xb0 [ 1705.932171][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1705.938139][T27858] RIP: 0033:0x7f2a7a289109 [ 1705.942592][T27858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1705.962262][T27858] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1705.970735][T27858] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1705.978755][T27858] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1705.986858][T27858] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1705.994870][T27858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1706.002882][T27858] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1706.011348][T27858] [ 1706.017524][T27858] Uninit was stored to memory at: [ 1706.023284][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.028032][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.032703][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.037791][T27858] do_syscall_64+0x3d/0xb0 [ 1706.042359][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.048303][T27858] [ 1706.050639][T27858] Uninit was stored to memory at: [ 1706.055917][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.060653][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.065453][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.070542][T27858] do_syscall_64+0x3d/0xb0 [ 1706.075174][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.081123][T27858] [ 1706.083633][T27858] Uninit was stored to memory at: [ 1706.088742][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.093616][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.098176][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.103352][T27858] do_syscall_64+0x3d/0xb0 [ 1706.107819][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.114031][T27858] [ 1706.116375][T27858] Uninit was stored to memory at: [ 1706.121473][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.126371][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.130941][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.136191][T27858] do_syscall_64+0x3d/0xb0 [ 1706.140699][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.146820][T27858] [ 1706.149160][T27858] Uninit was stored to memory at: [ 1706.154505][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.159245][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.164071][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.169160][T27858] do_syscall_64+0x3d/0xb0 [ 1706.173793][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.179742][T27858] [ 1706.182247][T27858] Uninit was stored to memory at: [ 1706.187352][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.192279][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.196851][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.202096][T27858] do_syscall_64+0x3d/0xb0 [ 1706.206566][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.212661][T27858] [ 1706.215004][T27858] Uninit was stored to memory at: [ 1706.220101][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1706.225016][T27858] do_recvmmsg+0x6b7/0x1200 [ 1706.229613][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.234869][T27858] do_syscall_64+0x3d/0xb0 [ 1706.239336][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.245481][T27858] [ 1706.247822][T27858] Local variable msg_sys created at: [ 1706.253272][T27858] do_recvmmsg+0xc9/0x1200 [ 1706.257749][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1706.318904][T14024] DVB: Unable to find symbol lgdt330x_attach() [ 1706.325351][T14024] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1706.393894][T14024] dvb-usb: bulk message failed: -22 (1/0) [ 1706.399859][T14024] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1706.507005][T14024] usb 2-1: USB disconnect, device number 81 [ 1706.627465][T14024] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1707.090210][T27858] not chained 470000 origins [ 1707.095070][T27858] CPU: 0 PID: 27858 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1707.105269][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.115343][T27858] Call Trace: [ 1707.118646][T27858] [ 1707.121586][T27858] dump_stack_lvl+0x200/0x28c [ 1707.126295][T27858] dump_stack+0x29/0x2c [ 1707.130473][T27858] kmsan_internal_chain_origin+0x78/0x120 [ 1707.136248][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.141416][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.147264][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.152429][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.158298][T27858] ? should_fail+0x79/0x9c0 [ 1707.162837][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.167987][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1707.174268][T27858] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1707.180374][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.185549][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.191411][T27858] __msan_chain_origin+0xbd/0x140 [ 1707.196471][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.201213][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.206399][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.212266][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.217422][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.223278][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.227849][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.233000][T27858] ? __x64_sys_recvmmsg+0x165/0x500 [ 1707.238234][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.243294][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1707.249591][T27858] do_syscall_64+0x3d/0xb0 [ 1707.254067][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.260008][T27858] RIP: 0033:0x7f2a7a289109 [ 1707.264439][T27858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1707.284090][T27858] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1707.292528][T27858] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1707.300519][T27858] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1707.308520][T27858] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1707.316528][T27858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1707.324528][T27858] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1707.332527][T27858] [ 1707.338150][T27858] Uninit was stored to memory at: [ 1707.343679][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.348405][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.353074][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.358155][T27858] do_syscall_64+0x3d/0xb0 [ 1707.362747][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.368714][T27858] [ 1707.371042][T27858] Uninit was stored to memory at: [ 1707.376268][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.380993][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.385664][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.390744][T27858] do_syscall_64+0x3d/0xb0 [ 1707.395349][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.401291][T27858] [ 1707.403753][T27858] Uninit was stored to memory at: [ 1707.408844][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.413749][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.418308][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.423565][T27858] do_syscall_64+0x3d/0xb0 [ 1707.428026][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.434131][T27858] [ 1707.436465][T27858] Uninit was stored to memory at: [ 1707.441539][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.446442][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.450993][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.456231][T27858] do_syscall_64+0x3d/0xb0 [ 1707.460691][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.466807][T27858] [ 1707.469146][T27858] Uninit was stored to memory at: [ 1707.474409][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.479137][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.483840][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.488917][T27858] do_syscall_64+0x3d/0xb0 [ 1707.493535][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.499522][T27858] [ 1707.501850][T27858] Uninit was stored to memory at: [ 1707.507112][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.511842][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.516540][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.521649][T27858] do_syscall_64+0x3d/0xb0 [ 1707.526277][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.532340][T27858] [ 1707.534680][T27858] Uninit was stored to memory at: [ 1707.539767][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.544659][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.549224][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.554487][T27858] do_syscall_64+0x3d/0xb0 [ 1707.558948][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.565064][T27858] [ 1707.567398][T27858] Local variable msg_sys created at: [ 1707.572863][T27858] do_recvmmsg+0xc9/0x1200 [ 1707.577337][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.796277][T27858] not chained 480000 origins [ 1707.800918][T27858] CPU: 0 PID: 27858 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1707.811128][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.821217][T27858] Call Trace: [ 1707.824640][T27858] [ 1707.827600][T27858] dump_stack_lvl+0x200/0x28c [ 1707.832334][T27858] dump_stack+0x29/0x2c [ 1707.836525][T27858] kmsan_internal_chain_origin+0x78/0x120 [ 1707.842311][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.847472][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.853437][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.858611][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.864503][T27858] ? should_fail+0x79/0x9c0 [ 1707.869051][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.874217][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1707.880515][T27858] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1707.886645][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.891804][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.897663][T27858] __msan_chain_origin+0xbd/0x140 [ 1707.902739][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1707.907491][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.912654][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.918517][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.923685][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1707.929551][T27858] do_recvmmsg+0x6b7/0x1200 [ 1707.934214][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1707.939381][T27858] ? __x64_sys_recvmmsg+0x165/0x500 [ 1707.944638][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1707.949713][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1707.956020][T27858] do_syscall_64+0x3d/0xb0 [ 1707.960488][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.966424][T27858] RIP: 0033:0x7f2a7a289109 [ 1707.970863][T27858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1707.990532][T27858] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1707.998993][T27858] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1708.007021][T27858] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1708.015027][T27858] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1708.023031][T27858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1708.031033][T27858] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1708.039061][T27858] [ 1708.044721][T27858] Uninit was stored to memory at: [ 1708.049842][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.055047][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.059606][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.064821][T27858] do_syscall_64+0x3d/0xb0 [ 1708.069290][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.075388][T27858] [ 1708.077759][T27858] Uninit was stored to memory at: [ 1708.083013][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.087761][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.092690][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.097797][T27858] do_syscall_64+0x3d/0xb0 [ 1708.102483][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.108504][T27858] [ 1708.110845][T27858] Uninit was stored to memory at: [ 1708.116262][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.121018][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.125795][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.130892][T27858] do_syscall_64+0x3d/0xb0 [ 1708.135608][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.141590][T27858] [ 1708.144123][T27858] Uninit was stored to memory at: [ 1708.149232][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.154170][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.158824][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.164130][T27858] do_syscall_64+0x3d/0xb0 [ 1708.168602][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.174750][T27858] [ 1708.177086][T27858] Uninit was stored to memory at: [ 1708.182299][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.187024][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.191618][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.196943][T27858] do_syscall_64+0x3d/0xb0 [ 1708.201437][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.207590][T27858] [ 1708.209934][T27858] Uninit was stored to memory at: [ 1708.215208][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.219948][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.224752][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.229846][T27858] do_syscall_64+0x3d/0xb0 [ 1708.234564][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.240517][T27858] [ 1708.243069][T27858] Uninit was stored to memory at: [ 1708.248172][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.253049][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.257611][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.262892][T27858] do_syscall_64+0x3d/0xb0 [ 1708.267362][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.273515][T27858] [ 1708.275867][T27858] Local variable msg_sys created at: [ 1708.281165][T27858] do_recvmmsg+0xc9/0x1200 [ 1708.285855][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.572544][T27858] not chained 490000 origins [ 1708.577187][T27858] CPU: 0 PID: 27858 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1708.587383][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1708.597474][T27858] Call Trace: [ 1708.600778][T27858] [ 1708.603723][T27858] dump_stack_lvl+0x200/0x28c [ 1708.608455][T27858] dump_stack+0x29/0x2c [ 1708.612649][T27858] kmsan_internal_chain_origin+0x78/0x120 [ 1708.618450][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.623633][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1708.629698][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.634889][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1708.640875][T27858] ? should_fail+0x79/0x9c0 [ 1708.645436][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.650668][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1708.656994][T27858] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1708.663146][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.668345][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1708.674227][T27858] __msan_chain_origin+0xbd/0x140 [ 1708.679326][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.684213][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.689507][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1708.695390][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.700585][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1708.706466][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.711053][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1708.716319][T27858] ? __x64_sys_recvmmsg+0x165/0x500 [ 1708.721594][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.726699][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1708.733023][T27858] do_syscall_64+0x3d/0xb0 [ 1708.737490][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.743442][T27858] RIP: 0033:0x7f2a7a289109 [ 1708.747901][T27858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1708.767560][T27858] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1708.776031][T27858] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1708.784046][T27858] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1708.792067][T27858] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1708.800081][T27858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1708.808098][T27858] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1708.816147][T27858] [ 1708.821902][T27858] Uninit was stored to memory at: [ 1708.827476][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.832350][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.836947][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.842168][T27858] do_syscall_64+0x3d/0xb0 [ 1708.846646][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.852738][T27858] [ 1708.855082][T27858] Uninit was stored to memory at: [ 1708.860182][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.865109][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.869692][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.875014][T27858] do_syscall_64+0x3d/0xb0 [ 1708.879507][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.885805][T27858] [ 1708.888189][T27858] Uninit was stored to memory at: [ 1708.893467][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.898199][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.902892][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.907974][T27858] do_syscall_64+0x3d/0xb0 [ 1708.912609][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.918549][T27858] [ 1708.920883][T27858] Uninit was stored to memory at: [ 1708.926356][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.931100][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.935866][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.941305][T27858] do_syscall_64+0x3d/0xb0 [ 1708.945985][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.952065][T27858] [ 1708.954410][T27858] Uninit was stored to memory at: [ 1708.959505][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.964441][T27858] do_recvmmsg+0x6b7/0x1200 [ 1708.969001][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1708.974371][T27858] do_syscall_64+0x3d/0xb0 [ 1708.978857][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1708.985003][T27858] [ 1708.987424][T27858] Uninit was stored to memory at: [ 1708.992704][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1708.997434][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.002198][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.007444][T27858] do_syscall_64+0x3d/0xb0 [ 1709.011902][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.018039][T27858] [ 1709.020398][T27858] Uninit was stored to memory at: [ 1709.025807][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.030534][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.035240][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.040339][T27858] do_syscall_64+0x3d/0xb0 [ 1709.045797][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.051745][T27858] [ 1709.054277][T27858] Local variable msg_sys created at: [ 1709.059688][T27858] do_recvmmsg+0xc9/0x1200 [ 1709.064377][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.359570][T27858] not chained 500000 origins [ 1709.364351][T27858] CPU: 1 PID: 27858 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1709.374538][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.384934][T27858] Call Trace: [ 1709.388667][T27858] [ 1709.391782][T27858] dump_stack_lvl+0x200/0x28c [ 1709.396506][T27858] dump_stack+0x29/0x2c [ 1709.400700][T27858] kmsan_internal_chain_origin+0x78/0x120 [ 1709.406460][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.411959][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1709.417840][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.423013][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1709.428888][T27858] ? should_fail+0x79/0x9c0 [ 1709.433415][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.438576][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1709.444936][T27858] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1709.451062][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.456253][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1709.462222][T27858] __msan_chain_origin+0xbd/0x140 [ 1709.467304][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.473236][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.478420][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1709.484280][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.489574][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1709.495646][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.500245][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1709.505437][T27858] ? __x64_sys_recvmmsg+0x165/0x500 [ 1709.513483][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.518584][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1709.524986][T27858] do_syscall_64+0x3d/0xb0 [ 1709.529473][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.535419][T27858] RIP: 0033:0x7f2a7a289109 [ 1709.539974][T27858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1709.559822][T27858] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1709.568596][T27858] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1709.576644][T27858] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1709.584651][T27858] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1709.592651][T27858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1709.600733][T27858] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1709.608733][T27858] [ 1709.615621][T27858] Uninit was stored to memory at: [ 1709.620749][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.626015][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.630577][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.635773][T27858] do_syscall_64+0x3d/0xb0 [ 1709.640237][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.646337][T27858] [ 1709.648675][T27858] Uninit was stored to memory at: [ 1709.654058][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.658910][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.663593][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.668804][T27858] do_syscall_64+0x3d/0xb0 [ 1709.673535][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.679500][T27858] [ 1709.682353][T27858] Uninit was stored to memory at: [ 1709.687481][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.692411][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.696978][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.702219][T27858] do_syscall_64+0x3d/0xb0 [ 1709.706696][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.712796][T27858] [ 1709.715139][T27858] Uninit was stored to memory at: [ 1709.720225][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.725115][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.729757][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.735085][T27858] do_syscall_64+0x3d/0xb0 [ 1709.739562][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.745643][T27858] [ 1709.747992][T27858] Uninit was stored to memory at: [ 1709.753174][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.757899][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.762562][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.767656][T27858] do_syscall_64+0x3d/0xb0 [ 1709.772223][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.778186][T27858] [ 1709.780533][T27858] Uninit was stored to memory at: [ 1709.785839][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.790575][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.795252][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.800335][T27858] do_syscall_64+0x3d/0xb0 [ 1709.804971][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.810913][T27858] [ 1709.813340][T27858] Uninit was stored to memory at: [ 1709.818438][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1709.823272][T27858] do_recvmmsg+0x6b7/0x1200 [ 1709.827828][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1709.833072][T27858] do_syscall_64+0x3d/0xb0 [ 1709.837540][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1709.843642][T27858] [ 1709.846061][T27858] Local variable msg_sys created at: [ 1709.851352][T27858] do_recvmmsg+0xc9/0x1200 [ 1709.856077][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.058403][T27858] not chained 510000 origins [ 1710.063253][T27858] CPU: 1 PID: 27858 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1710.073462][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.083557][T27858] Call Trace: [ 1710.086853][T27858] [ 1710.089787][T27858] dump_stack_lvl+0x200/0x28c [ 1710.094504][T27858] dump_stack+0x29/0x2c [ 1710.098698][T27858] kmsan_internal_chain_origin+0x78/0x120 [ 1710.104462][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.109622][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1710.115465][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.120641][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1710.126488][T27858] ? should_fail+0x79/0x9c0 [ 1710.131027][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.136176][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1710.142504][T27858] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1710.148661][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.153819][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1710.159686][T27858] __msan_chain_origin+0xbd/0x140 [ 1710.164757][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.169530][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.174710][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1710.180585][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.185755][T27858] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1710.191611][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.196182][T27858] ? kmsan_get_metadata+0x33/0x220 [ 1710.201367][T27858] ? __x64_sys_recvmmsg+0x165/0x500 [ 1710.206632][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.211702][T27858] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1710.217999][T27858] do_syscall_64+0x3d/0xb0 [ 1710.222469][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.228414][T27858] RIP: 0033:0x7f2a7a289109 [ 1710.232863][T27858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1710.252622][T27858] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1710.261097][T27858] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1710.269189][T27858] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1710.277207][T27858] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1710.285226][T27858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1710.293236][T27858] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1710.301268][T27858] [ 1710.307427][T27858] Uninit was stored to memory at: [ 1710.313129][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.317903][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.322575][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.327665][T27858] do_syscall_64+0x3d/0xb0 [ 1710.332290][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.338243][T27858] [ 1710.340566][T27858] Uninit was stored to memory at: [ 1710.345901][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.350636][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.355430][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.360551][T27858] do_syscall_64+0x3d/0xb0 [ 1710.365187][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.371246][T27858] [ 1710.373736][T27858] Uninit was stored to memory at: [ 1710.378901][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.383835][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.388416][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.393672][T27858] do_syscall_64+0x3d/0xb0 [ 1710.398142][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.404261][T27858] [ 1710.406604][T27858] Uninit was stored to memory at: [ 1710.411688][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.416564][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.421122][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.426357][T27858] do_syscall_64+0x3d/0xb0 [ 1710.430819][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.436862][T27858] [ 1710.439196][T27858] Uninit was stored to memory at: [ 1710.444435][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.449193][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.453913][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.458990][T27858] do_syscall_64+0x3d/0xb0 [ 1710.463594][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.469530][T27858] [ 1710.471850][T27858] Uninit was stored to memory at: [ 1710.477092][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.481822][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.486613][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.491693][T27858] do_syscall_64+0x3d/0xb0 [ 1710.496306][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.502339][T27858] [ 1710.504672][T27858] Uninit was stored to memory at: [ 1710.509761][T27858] ___sys_recvmsg+0x73b/0xb40 [ 1710.514661][T27858] do_recvmmsg+0x6b7/0x1200 [ 1710.519215][T27858] __x64_sys_recvmmsg+0x2b3/0x500 [ 1710.524430][T27858] do_syscall_64+0x3d/0xb0 [ 1710.528893][T27858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1710.534954][T27858] [ 1710.537295][T27858] Local variable msg_sys created at: [ 1710.542723][T27858] do_recvmmsg+0xc9/0x1200 [ 1710.547201][T27858] __x64_sys_recvmmsg+0x2b3/0x500 03:45:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0x0, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresgid(&(0x7f0000000a00), 0x0, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:45:01 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) 03:45:01 executing program 0: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='&', 0x1, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) keyctl$setperm(0x5, r0, 0x1000000) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) 03:45:01 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) 03:45:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007fb5c540ca0768a801af000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1710.923986][ T24] audit: type=1326 audit(1655437501.983:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27890 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3c89109 code=0x0 03:45:02 executing program 0: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='&', 0x1, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) keyctl$setperm(0x5, r0, 0x1000000) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) 03:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 1711.112942][T14024] usb 2-1: new high-speed USB device number 82 using dummy_hcd 03:45:02 executing program 0: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='&', 0x1, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) keyctl$setperm(0x5, r0, 0x1000000) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) [ 1711.473605][T14024] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=af.01 [ 1711.483436][T14024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:45:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) [ 1711.548503][T14024] usb 2-1: config 0 descriptor?? [ 1711.614297][T14024] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1711.793498][T27897] not chained 520000 origins [ 1711.798381][T27897] CPU: 1 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1711.802778][T14024] dvb-usb: bulk message failed: -22 (1/0) [ 1711.808583][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.808616][T27897] Call Trace: [ 1711.808632][T27897] [ 1711.808648][T27897] dump_stack_lvl+0x200/0x28c [ 1711.808713][T27897] dump_stack+0x29/0x2c [ 1711.808759][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1711.808835][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.808896][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1711.808962][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.809022][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1711.809094][T27897] ? should_fail+0x79/0x9c0 [ 1711.809138][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.809202][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1711.809269][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1711.809334][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.809395][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1711.809460][T27897] __msan_chain_origin+0xbd/0x140 [ 1711.809519][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1711.809599][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.809659][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1711.809722][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.809781][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1711.809849][T27897] do_recvmmsg+0x6b7/0x1200 [ 1711.809923][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1711.809990][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1711.810055][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1711.810115][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1711.810196][T27897] do_syscall_64+0x3d/0xb0 [ 1711.810247][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1711.810299][T27897] RIP: 0033:0x7f2a7a289109 [ 1711.810332][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1711.810378][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1711.810422][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1711.810458][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1711.810488][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1711.810519][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1711.810548][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1711.810596][T27897] [ 1711.813663][T27897] Uninit was stored to memory at: [ 1711.901130][T14024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1711.905043][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1711.964521][T14024] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1711.967956][T27897] do_recvmmsg+0x6b7/0x1200 [ 1711.968024][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1711.968083][T27897] do_syscall_64+0x3d/0xb0 03:45:03 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) [ 1711.974257][T14024] usb 2-1: media controller created [ 1711.978575][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1711.978638][T27897] [ 1711.978648][T27897] Uninit was stored to memory at: [ 1711.978722][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1712.116138][T27897] do_recvmmsg+0x6b7/0x1200 [ 1712.120705][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1712.125960][T27897] do_syscall_64+0x3d/0xb0 [ 1712.130417][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.136485][T27897] [ 1712.138823][T27897] Uninit was stored to memory at: [ 1712.144134][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1712.148886][T27897] do_recvmmsg+0x6b7/0x1200 [ 1712.154124][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1712.159217][T27897] do_syscall_64+0x3d/0xb0 [ 1712.163945][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.169894][T27897] [ 1712.172387][T27897] Uninit was stored to memory at: [ 1712.177495][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1712.182423][T27897] do_recvmmsg+0x6b7/0x1200 [ 1712.187010][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1712.192246][T27897] do_syscall_64+0x3d/0xb0 [ 1712.196737][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.202860][T27897] [ 1712.205218][T27897] Uninit was stored to memory at: [ 1712.210341][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1712.215255][T27897] do_recvmmsg+0x6b7/0x1200 [ 1712.219819][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1712.225095][T27897] do_syscall_64+0x3d/0xb0 [ 1712.229572][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.235722][T27897] [ 1712.238161][T27897] Uninit was stored to memory at: [ 1712.243531][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1712.248796][T27897] do_recvmmsg+0x6b7/0x1200 [ 1712.253656][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1712.258753][T27897] do_syscall_64+0x3d/0xb0 [ 1712.263506][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.269542][T27897] [ 1712.271890][T27897] Uninit was stored to memory at: [ 1712.277346][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1712.282252][T27897] do_recvmmsg+0x6b7/0x1200 [ 1712.286822][T27897] __x64_sys_recvmmsg+0x2b3/0x500 03:45:03 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) [ 1712.291927][T27897] do_syscall_64+0x3d/0xb0 [ 1712.296566][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.302671][T27897] [ 1712.305014][T27897] Local variable msg_sys created at: [ 1712.310310][T27897] do_recvmmsg+0xc9/0x1200 [ 1712.315103][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1712.405441][T14024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1712.468668][ T24] audit: type=1326 audit(1655437503.523:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27915 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 [ 1712.549853][ T24] audit: type=1326 audit(1655437503.553:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27916 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3c89109 code=0x0 [ 1712.823261][T14024] DVB: Unable to find symbol lgdt330x_attach() [ 1712.832723][T14024] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1712.873731][T14024] dvb-usb: bulk message failed: -22 (1/0) [ 1712.880036][T14024] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1713.007640][T14024] usb 2-1: USB disconnect, device number 82 [ 1713.086965][T27925] udevd[27925]: setting mode of /dev/dvb/adapter1/dvr0 to 020660 failed: No such file or directory [ 1713.166621][T14024] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1713.169443][T27925] udevd[27925]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 1713.499154][T27897] not chained 530000 origins [ 1713.504005][T27897] CPU: 1 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1713.514210][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.524318][T27897] Call Trace: [ 1713.527618][T27897] [ 1713.530565][T27897] dump_stack_lvl+0x200/0x28c [ 1713.535293][T27897] dump_stack+0x29/0x2c [ 1713.539516][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1713.545302][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.550563][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1713.556430][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.561596][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1713.567470][T27897] ? should_fail+0x79/0x9c0 [ 1713.572015][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.577223][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1713.583524][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1713.589652][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.594824][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1713.600696][T27897] __msan_chain_origin+0xbd/0x140 [ 1713.605782][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.610540][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.615717][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1713.621586][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.626755][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1713.632630][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.637204][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1713.642379][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1713.647638][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.652719][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1713.659045][T27897] do_syscall_64+0x3d/0xb0 [ 1713.663537][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.669495][T27897] RIP: 0033:0x7f2a7a289109 [ 1713.673950][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1713.693874][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1713.702337][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1713.710374][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1713.718384][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1713.726395][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1713.734398][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1713.742425][T27897] [ 1713.748613][T27897] Uninit was stored to memory at: [ 1713.756906][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.761652][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.766804][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.771898][T27897] do_syscall_64+0x3d/0xb0 [ 1713.776471][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.782601][T27897] [ 1713.784936][T27897] Uninit was stored to memory at: [ 1713.790033][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.794931][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.799491][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.804783][T27897] do_syscall_64+0x3d/0xb0 [ 1713.809251][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.815379][T27897] [ 1713.817715][T27897] Uninit was stored to memory at: [ 1713.823044][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.827809][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.832544][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.837634][T27897] do_syscall_64+0x3d/0xb0 [ 1713.842367][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.848322][T27897] [ 1713.850669][T27897] Uninit was stored to memory at: [ 1713.856030][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.860782][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.865954][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.871067][T27897] do_syscall_64+0x3d/0xb0 [ 1713.875730][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.881708][T27897] [ 1713.884302][T27897] Uninit was stored to memory at: [ 1713.889410][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.894322][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.898903][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.904188][T27897] do_syscall_64+0x3d/0xb0 [ 1713.908674][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.914795][T27897] [ 1713.917135][T27897] Uninit was stored to memory at: [ 1713.922550][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.927283][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.931922][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.937098][T27897] do_syscall_64+0x3d/0xb0 [ 1713.941557][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.947727][T27897] [ 1713.950067][T27897] Uninit was stored to memory at: [ 1713.955350][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1713.960189][T27897] do_recvmmsg+0x6b7/0x1200 [ 1713.964928][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1713.970018][T27897] do_syscall_64+0x3d/0xb0 [ 1713.974660][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1713.980607][T27897] [ 1713.983157][T27897] Local variable msg_sys created at: [ 1713.988458][T27897] do_recvmmsg+0xc9/0x1200 [ 1713.993095][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.331868][T27897] not chained 540000 origins [ 1714.338024][T27897] CPU: 1 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1714.348368][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.358464][T27897] Call Trace: [ 1714.361764][T27897] [ 1714.364858][T27897] dump_stack_lvl+0x200/0x28c [ 1714.369604][T27897] dump_stack+0x29/0x2c [ 1714.373911][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1714.379713][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.384941][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1714.390820][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.393647][T27911] tipc: Started in network mode [ 1714.395984][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1714.400898][T27911] tipc: Node identity 9, cluster identity 4711 [ 1714.406678][T27897] ? should_fail+0x79/0x9c0 [ 1714.406728][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.406787][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1714.406853][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1714.406917][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.406977][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1714.407043][T27897] __msan_chain_origin+0xbd/0x140 [ 1714.407104][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.407188][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.407249][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1714.413530][T27911] tipc: Node number set to 9 [ 1714.417891][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.476832][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1714.482755][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.487351][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1714.492555][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1714.497834][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.502948][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1714.509261][T27897] do_syscall_64+0x3d/0xb0 [ 1714.513735][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.519692][T27897] RIP: 0033:0x7f2a7a289109 [ 1714.524152][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1714.543808][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1714.552389][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1714.560426][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1714.568437][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1714.576530][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1714.584621][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1714.592644][T27897] [ 1714.595885][T27897] Uninit was stored to memory at: [ 1714.601005][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.605879][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.610440][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.615631][T27897] do_syscall_64+0x3d/0xb0 [ 1714.620200][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.626242][T27897] [ 1714.628581][T27897] Uninit was stored to memory at: [ 1714.633835][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.638560][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.643282][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.648547][T27897] do_syscall_64+0x3d/0xb0 [ 1714.653174][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.659126][T27897] [ 1714.661472][T27897] Uninit was stored to memory at: [ 1714.666752][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.671485][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.676243][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.681501][T27897] do_syscall_64+0x3d/0xb0 [ 1714.686136][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.692170][T27897] [ 1714.694511][T27897] Uninit was stored to memory at: [ 1714.699715][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.704627][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.709194][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.714445][T27897] do_syscall_64+0x3d/0xb0 [ 1714.718911][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.725007][T27897] [ 1714.727342][T27897] Uninit was stored to memory at: [ 1714.732581][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.737304][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.741864][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.747153][T27897] do_syscall_64+0x3d/0xb0 [ 1714.751623][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.757728][T27897] [ 1714.760070][T27897] Uninit was stored to memory at: [ 1714.765354][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.770085][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.774833][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.779911][T27897] do_syscall_64+0x3d/0xb0 [ 1714.784549][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.790519][T27897] [ 1714.793032][T27897] Uninit was stored to memory at: [ 1714.798144][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1714.803070][T27897] do_recvmmsg+0x6b7/0x1200 [ 1714.807639][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1714.812895][T27897] do_syscall_64+0x3d/0xb0 [ 1714.817359][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1714.823396][T27897] [ 1714.825734][T27897] Local variable msg_sys created at: [ 1714.831033][T27897] do_recvmmsg+0xc9/0x1200 [ 1714.835668][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.210001][T27897] not chained 550000 origins [ 1715.215099][T27897] CPU: 0 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1715.225389][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.235475][T27897] Call Trace: [ 1715.238770][T27897] [ 1715.241807][T27897] dump_stack_lvl+0x200/0x28c [ 1715.246551][T27897] dump_stack+0x29/0x2c [ 1715.250769][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1715.256655][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.261855][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1715.267733][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.272916][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1715.278795][T27897] ? should_fail+0x79/0x9c0 [ 1715.283350][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.288536][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1715.294836][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1715.300981][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.306193][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1715.312095][T27897] __msan_chain_origin+0xbd/0x140 [ 1715.317184][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.321955][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.327144][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1715.333026][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.338196][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1715.344072][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.348670][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1715.353864][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1715.359141][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.364223][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1715.370532][T27897] do_syscall_64+0x3d/0xb0 [ 1715.375006][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.380940][T27897] RIP: 0033:0x7f2a7a289109 [ 1715.385400][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1715.405068][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1715.413535][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1715.421533][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1715.429523][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1715.437522][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1715.445513][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1715.453523][T27897] [ 1715.459320][T27897] Uninit was stored to memory at: [ 1715.464814][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.469539][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.474226][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.479305][T27897] do_syscall_64+0x3d/0xb0 [ 1715.483910][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.489853][T27897] [ 1715.492307][T27897] Uninit was stored to memory at: [ 1715.497394][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.502255][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.506869][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.512130][T27897] do_syscall_64+0x3d/0xb0 [ 1715.516595][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.522734][T27897] [ 1715.525095][T27897] Uninit was stored to memory at: [ 1715.530210][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.535132][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.539781][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.545079][T27897] do_syscall_64+0x3d/0xb0 [ 1715.549571][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.555717][T27897] [ 1715.558071][T27897] Uninit was stored to memory at: [ 1715.563336][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.568073][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.572855][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.577964][T27897] do_syscall_64+0x3d/0xb0 [ 1715.582622][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.588567][T27897] [ 1715.590897][T27897] Uninit was stored to memory at: [ 1715.596148][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.600885][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.605736][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.610853][T27897] do_syscall_64+0x3d/0xb0 [ 1715.615456][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.621393][T27897] [ 1715.623897][T27897] Uninit was stored to memory at: [ 1715.628991][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.633913][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.638488][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.643688][T27897] do_syscall_64+0x3d/0xb0 [ 1715.650230][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.656490][T27897] [ 1715.658853][T27897] Uninit was stored to memory at: [ 1715.664095][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1715.668837][T27897] do_recvmmsg+0x6b7/0x1200 [ 1715.673562][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.678651][T27897] do_syscall_64+0x3d/0xb0 [ 1715.683299][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.689239][T27897] [ 1715.691556][T27897] Local variable msg_sys created at: [ 1715.697017][T27897] do_recvmmsg+0xc9/0x1200 [ 1715.701496][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1715.976824][T27897] not chained 560000 origins [ 1715.981465][T27897] CPU: 0 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1715.991833][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.002180][T27897] Call Trace: [ 1716.005476][T27897] [ 1716.008422][T27897] dump_stack_lvl+0x200/0x28c [ 1716.013157][T27897] dump_stack+0x29/0x2c [ 1716.017358][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1716.023311][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.028467][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.034329][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.039490][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.045354][T27897] ? should_fail+0x79/0x9c0 [ 1716.049893][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.055050][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1716.061348][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1716.067470][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.072661][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.078760][T27897] __msan_chain_origin+0xbd/0x140 [ 1716.083905][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.088668][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.093841][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.099794][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.104971][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.110858][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.115439][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.120732][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1716.126007][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.131097][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1716.137418][T27897] do_syscall_64+0x3d/0xb0 [ 1716.141895][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.147829][T27897] RIP: 0033:0x7f2a7a289109 [ 1716.152266][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1716.171922][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1716.180399][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1716.188420][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1716.196427][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1716.204558][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1716.212691][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1716.220723][T27897] [ 1716.226354][T27897] Uninit was stored to memory at: [ 1716.231554][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.236922][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.241494][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.247495][T27897] do_syscall_64+0x3d/0xb0 [ 1716.252964][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.258910][T27897] [ 1716.261271][T27897] Uninit was stored to memory at: [ 1716.266555][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.271704][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.276951][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.282947][T27897] do_syscall_64+0x3d/0xb0 [ 1716.287426][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.293613][T27897] [ 1716.296035][T27897] Uninit was stored to memory at: [ 1716.301235][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.306281][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.310852][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.316337][T27897] do_syscall_64+0x3d/0xb0 [ 1716.320810][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.326993][T27897] [ 1716.329336][T27897] Uninit was stored to memory at: [ 1716.334701][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.339430][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.344202][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.349994][T27897] do_syscall_64+0x3d/0xb0 [ 1716.354659][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.360703][T27897] [ 1716.363272][T27897] Uninit was stored to memory at: [ 1716.368376][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.373301][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.377966][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.383279][T27897] do_syscall_64+0x3d/0xb0 [ 1716.387863][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.394008][T27897] [ 1716.396343][T27897] Uninit was stored to memory at: [ 1716.401439][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.406364][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.410918][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.416201][T27897] do_syscall_64+0x3d/0xb0 [ 1716.420674][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.426857][T27897] [ 1716.429213][T27897] Uninit was stored to memory at: [ 1716.434558][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.439295][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.444098][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.449177][T27897] do_syscall_64+0x3d/0xb0 [ 1716.453775][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.459714][T27897] [ 1716.462242][T27897] Local variable msg_sys created at: [ 1716.467529][T27897] do_recvmmsg+0xc9/0x1200 [ 1716.472130][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.801223][T27897] not chained 570000 origins [ 1716.806238][T27897] CPU: 1 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1716.816436][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.826522][T27897] Call Trace: [ 1716.829823][T27897] [ 1716.832780][T27897] dump_stack_lvl+0x200/0x28c [ 1716.837596][T27897] dump_stack+0x29/0x2c [ 1716.841786][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1716.847573][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.852745][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.858612][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.863797][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.869675][T27897] ? should_fail+0x79/0x9c0 [ 1716.874221][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.879392][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1716.885714][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1716.891915][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.897084][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.902952][T27897] __msan_chain_origin+0xbd/0x140 [ 1716.908031][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1716.912784][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.917945][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.923817][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.928983][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1716.934855][T27897] do_recvmmsg+0x6b7/0x1200 [ 1716.939435][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1716.944605][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1716.949879][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1716.954955][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1716.961272][T27897] do_syscall_64+0x3d/0xb0 [ 1716.965733][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.971695][T27897] RIP: 0033:0x7f2a7a289109 [ 1716.976133][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1716.995785][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1717.004248][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1717.012257][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1717.020256][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1717.028257][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1717.036373][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1717.044399][T27897] [ 1717.051004][T27897] Uninit was stored to memory at: [ 1717.059402][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.064342][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.069000][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.074255][T27897] do_syscall_64+0x3d/0xb0 [ 1717.078713][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.084754][T27897] [ 1717.087105][T27897] Uninit was stored to memory at: [ 1717.092285][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.097006][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.101557][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.106750][T27897] do_syscall_64+0x3d/0xb0 [ 1717.111215][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.117348][T27897] [ 1717.119689][T27897] Uninit was stored to memory at: [ 1717.124959][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.129686][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.134365][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.139451][T27897] do_syscall_64+0x3d/0xb0 [ 1717.144014][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.149957][T27897] [ 1717.152448][T27897] Uninit was stored to memory at: [ 1717.157544][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.162569][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.167163][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.172444][T27897] do_syscall_64+0x3d/0xb0 [ 1717.176910][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.183022][T27897] [ 1717.185359][T27897] Uninit was stored to memory at: [ 1717.190456][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.195353][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.199910][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.205154][T27897] do_syscall_64+0x3d/0xb0 [ 1717.209621][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.215732][T27897] [ 1717.218062][T27897] Uninit was stored to memory at: [ 1717.223304][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.228033][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.232753][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.237934][T27897] do_syscall_64+0x3d/0xb0 [ 1717.242517][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.248466][T27897] [ 1717.250806][T27897] Uninit was stored to memory at: [ 1717.256205][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.260958][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.265712][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.270800][T27897] do_syscall_64+0x3d/0xb0 [ 1717.275462][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.281408][T27897] [ 1717.283903][T27897] Local variable msg_sys created at: [ 1717.289200][T27897] do_recvmmsg+0xc9/0x1200 [ 1717.293965][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.520638][T27897] not chained 580000 origins [ 1717.525553][T27897] CPU: 1 PID: 27897 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1717.535752][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.545841][T27897] Call Trace: [ 1717.549146][T27897] [ 1717.552151][T27897] dump_stack_lvl+0x200/0x28c [ 1717.556920][T27897] dump_stack+0x29/0x2c [ 1717.561142][T27897] kmsan_internal_chain_origin+0x78/0x120 [ 1717.566946][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.572133][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1717.578012][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.583181][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1717.589338][T27897] ? should_fail+0x79/0x9c0 [ 1717.593862][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.599019][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1717.605298][T27897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1717.611423][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.616572][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1717.622430][T27897] __msan_chain_origin+0xbd/0x140 [ 1717.627512][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.632250][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.637425][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1717.647270][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.652460][T27897] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1717.658363][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.662935][T27897] ? kmsan_get_metadata+0x33/0x220 [ 1717.668189][T27897] ? __x64_sys_recvmmsg+0x165/0x500 [ 1717.673433][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.678599][T27897] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1717.684900][T27897] do_syscall_64+0x3d/0xb0 [ 1717.689370][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.695297][T27897] RIP: 0033:0x7f2a7a289109 [ 1717.699739][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1717.719371][T27897] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1717.727806][T27897] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1717.735813][T27897] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1717.743812][T27897] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1717.751808][T27897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1717.759791][T27897] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1717.767791][T27897] [ 1717.774092][T27897] Uninit was stored to memory at: [ 1717.779225][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.784572][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.789161][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.794364][T27897] do_syscall_64+0x3d/0xb0 [ 1717.798832][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.804898][T27897] [ 1717.807232][T27897] Uninit was stored to memory at: [ 1717.812476][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.817205][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.821765][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.827245][T27897] do_syscall_64+0x3d/0xb0 [ 1717.831854][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.838001][T27897] [ 1717.840364][T27897] Uninit was stored to memory at: [ 1717.845665][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.850459][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.855181][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.860393][T27897] do_syscall_64+0x3d/0xb0 [ 1717.865071][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.871047][T27897] [ 1717.873566][T27897] Uninit was stored to memory at: [ 1717.878664][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.883592][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.888162][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.893454][T27897] do_syscall_64+0x3d/0xb0 [ 1717.897922][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.904050][T27897] [ 1717.906391][T27897] Uninit was stored to memory at: [ 1717.911500][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.916410][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.920977][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.926270][T27897] do_syscall_64+0x3d/0xb0 [ 1717.930750][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.936880][T27897] [ 1717.939216][T27897] Uninit was stored to memory at: [ 1717.944468][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.949200][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.953915][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.959192][T27897] do_syscall_64+0x3d/0xb0 [ 1717.963818][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1717.969852][T27897] [ 1717.972423][T27897] Uninit was stored to memory at: [ 1717.977711][T27897] ___sys_recvmsg+0x73b/0xb40 [ 1717.982702][T27897] do_recvmmsg+0x6b7/0x1200 [ 1717.987282][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1717.992538][T27897] do_syscall_64+0x3d/0xb0 [ 1717.997002][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1718.003046][T27897] [ 1718.005393][T27897] Local variable msg_sys created at: [ 1718.010682][T27897] do_recvmmsg+0xc9/0x1200 [ 1718.015328][T27897] __x64_sys_recvmmsg+0x2b3/0x500 [ 1718.137348][ T3565] tipc: Left network mode 03:45:09 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) 03:45:09 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) 03:45:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007fb5c540ca0768a801af000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:45:09 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) 03:45:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setrlimit(0xe, &(0x7f0000000380)={0x0, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresgid(&(0x7f0000000a00), 0x0, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:45:09 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) [ 1718.297440][ T24] audit: type=1326 audit(1655437509.353:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27934 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 [ 1718.371479][ T24] audit: type=1326 audit(1655437509.383:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27928 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e3c89109 code=0x0 [ 1718.702978][T14024] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1719.075860][T14024] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=af.01 [ 1719.087986][T14024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.140658][T14024] usb 2-1: config 0 descriptor?? 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x51e, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}]}, &(0x7f0000000200)=0x10) 03:45:10 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create(0x401) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) [ 1719.250225][T14024] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1719.412699][T14024] dvb-usb: bulk message failed: -22 (1/0) [ 1719.426027][T14024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x51e, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}]}, &(0x7f0000000200)=0x10) [ 1719.489958][ T24] audit: type=1326 audit(1655437510.543:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27953 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 [ 1719.503725][T14024] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1719.521615][T14024] usb 2-1: media controller created [ 1719.654575][T14024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 03:45:10 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x51e, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}]}, &(0x7f0000000200)=0x10) [ 1720.053088][T27945] not chained 590000 origins [ 1720.058138][T27945] CPU: 0 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1720.068379][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.078826][T27945] Call Trace: [ 1720.082135][T27945] [ 1720.085117][T27945] dump_stack_lvl+0x200/0x28c [ 1720.089855][T27945] dump_stack+0x29/0x2c [ 1720.094058][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1720.099853][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.105034][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1720.110945][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.116131][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1720.122021][T27945] ? should_fail+0x79/0x9c0 [ 1720.131526][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.136749][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1720.143065][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1720.149295][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.154470][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1720.160350][T27945] __msan_chain_origin+0xbd/0x140 [ 1720.165441][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.170214][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.175398][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1720.181312][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.186513][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1720.192399][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.196981][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1720.202165][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1720.207439][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.212524][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1720.218844][T27945] do_syscall_64+0x3d/0xb0 [ 1720.223329][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.229277][T27945] RIP: 0033:0x7f2a7a289109 [ 1720.233814][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1720.253499][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1720.261974][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1720.270003][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1720.278108][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1720.286129][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1720.294136][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1720.302268][T27945] [ 1720.308326][T27945] Uninit was stored to memory at: [ 1720.313875][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.318608][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.323328][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.328422][T27945] do_syscall_64+0x3d/0xb0 [ 1720.333029][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.338983][T27945] [ 1720.341429][T27945] Uninit was stored to memory at: [ 1720.346680][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.351538][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.356259][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.361350][T27945] do_syscall_64+0x3d/0xb0 [ 1720.365978][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.371915][T27945] [ 1720.374348][T27945] Uninit was stored to memory at: [ 1720.379440][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.384315][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.388871][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.394114][T27945] do_syscall_64+0x3d/0xb0 [ 1720.398580][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.404677][T27945] [ 1720.407013][T27945] Uninit was stored to memory at: [ 1720.412292][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.417021][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.421578][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.426858][T27945] do_syscall_64+0x3d/0xb0 [ 1720.431328][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.437667][T27945] [ 1720.440013][T27945] Uninit was stored to memory at: [ 1720.445657][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.450399][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.455161][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.460245][T27945] do_syscall_64+0x3d/0xb0 [ 1720.464923][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.470871][T27945] [ 1720.473401][T27945] Uninit was stored to memory at: [ 1720.478606][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.483548][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.488135][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.493442][T27945] do_syscall_64+0x3d/0xb0 [ 1720.497917][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.504077][T27945] [ 1720.506415][T27945] Uninit was stored to memory at: [ 1720.511509][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1720.516440][T27945] do_recvmmsg+0x6b7/0x1200 [ 1720.521007][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.526340][T27945] do_syscall_64+0x3d/0xb0 [ 1720.530812][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1720.536963][T27945] [ 1720.539300][T27945] Local variable msg_sys created at: [ 1720.545225][T27945] do_recvmmsg+0xc9/0x1200 [ 1720.549722][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1720.568997][T14024] DVB: Unable to find symbol lgdt330x_attach() [ 1720.575448][T14024] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1720.625338][T14024] dvb-usb: bulk message failed: -22 (1/0) [ 1720.631217][T14024] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. 03:45:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x21, 0x47, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000021c0), 0xe98, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/76}, 0x20) 03:45:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) 03:45:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x51e, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}]}, &(0x7f0000000200)=0x10) [ 1720.739604][T14024] usb 2-1: USB disconnect, device number 83 [ 1721.106540][T14024] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1721.795687][T27945] not chained 600000 origins [ 1721.800324][T27945] CPU: 0 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1721.810517][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.820725][T27945] Call Trace: [ 1721.824034][T27945] [ 1721.826989][T27945] dump_stack_lvl+0x200/0x28c [ 1721.831733][T27945] dump_stack+0x29/0x2c [ 1721.835943][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1721.841770][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.847023][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1721.853162][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.858434][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1721.864339][T27945] ? should_fail+0x79/0x9c0 [ 1721.869142][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.874410][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1721.880880][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1721.887069][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.892355][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1721.898229][T27945] __msan_chain_origin+0xbd/0x140 [ 1721.903308][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1721.908060][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.913327][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1721.919283][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.924446][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1721.930316][T27945] do_recvmmsg+0x6b7/0x1200 [ 1721.934887][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1721.940070][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1721.945346][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1721.950520][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1721.956839][T27945] do_syscall_64+0x3d/0xb0 [ 1721.961312][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1721.967264][T27945] RIP: 0033:0x7f2a7a289109 [ 1721.971713][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1721.991637][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1722.000117][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1722.008387][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1722.016385][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1722.024382][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1722.032817][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1722.040827][T27945] [ 1722.046940][T27945] Uninit was stored to memory at: [ 1722.052862][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.057639][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.062465][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.067560][T27945] do_syscall_64+0x3d/0xb0 [ 1722.072155][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.078095][T27945] [ 1722.080439][T27945] Uninit was stored to memory at: [ 1722.085669][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.090418][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.095128][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.100206][T27945] do_syscall_64+0x3d/0xb0 [ 1722.104869][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.110827][T27945] [ 1722.113319][T27945] Uninit was stored to memory at: [ 1722.118413][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.123370][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.127931][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.133140][T27945] do_syscall_64+0x3d/0xb0 [ 1722.137608][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.144077][T27945] [ 1722.146429][T27945] Uninit was stored to memory at: [ 1722.151543][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.156418][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.160984][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.166321][T27945] do_syscall_64+0x3d/0xb0 [ 1722.170818][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.176975][T27945] [ 1722.179323][T27945] Uninit was stored to memory at: [ 1722.184524][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.189269][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.194008][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.199075][T27945] do_syscall_64+0x3d/0xb0 [ 1722.203682][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.209641][T27945] [ 1722.212160][T27945] Uninit was stored to memory at: [ 1722.217445][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.222328][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.226891][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.232160][T27945] do_syscall_64+0x3d/0xb0 [ 1722.236631][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.242772][T27945] [ 1722.245108][T27945] Uninit was stored to memory at: [ 1722.250201][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.255127][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.260559][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.265877][T27945] do_syscall_64+0x3d/0xb0 [ 1722.270341][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.276489][T27945] [ 1722.278917][T27945] Local variable msg_sys created at: [ 1722.284369][T27945] do_recvmmsg+0xc9/0x1200 [ 1722.288840][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.563233][T27945] not chained 610000 origins [ 1722.567877][T27945] CPU: 0 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1722.578086][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1722.588257][T27945] Call Trace: [ 1722.591556][T27945] [ 1722.594502][T27945] dump_stack_lvl+0x200/0x28c [ 1722.599241][T27945] dump_stack+0x29/0x2c [ 1722.603445][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1722.609236][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.614415][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1722.620280][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.625455][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1722.631323][T27945] ? should_fail+0x79/0x9c0 [ 1722.635863][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.641435][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1722.647942][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1722.654079][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.659255][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1722.665308][T27945] __msan_chain_origin+0xbd/0x140 [ 1722.670408][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.675165][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.680343][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1722.686219][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.691390][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1722.697262][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.701836][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1722.707014][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1722.712271][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.717351][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1722.723686][T27945] do_syscall_64+0x3d/0xb0 [ 1722.728199][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.734154][T27945] RIP: 0033:0x7f2a7a289109 [ 1722.738600][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1722.758479][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1722.766963][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1722.774983][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1722.782993][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1722.791013][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1722.799020][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1722.807051][T27945] [ 1722.812837][T27945] Uninit was stored to memory at: [ 1722.817952][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.823301][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.827865][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.833078][T27945] do_syscall_64+0x3d/0xb0 [ 1722.837543][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.843751][T27945] [ 1722.846089][T27945] Uninit was stored to memory at: [ 1722.851286][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.856188][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.860748][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.866046][T27945] do_syscall_64+0x3d/0xb0 [ 1722.870515][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.876669][T27945] [ 1722.879006][T27945] Uninit was stored to memory at: [ 1722.884265][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.888991][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.893735][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.898815][T27945] do_syscall_64+0x3d/0xb0 [ 1722.903474][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.909416][T27945] [ 1722.911750][T27945] Uninit was stored to memory at: [ 1722.917082][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.921819][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.926602][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.931689][T27945] do_syscall_64+0x3d/0xb0 [ 1722.936367][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.942533][T27945] [ 1722.944877][T27945] Uninit was stored to memory at: [ 1722.949973][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.954897][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.959451][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.964670][T27945] do_syscall_64+0x3d/0xb0 [ 1722.969136][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1722.975275][T27945] [ 1722.977615][T27945] Uninit was stored to memory at: [ 1722.982829][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1722.987563][T27945] do_recvmmsg+0x6b7/0x1200 [ 1722.992334][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1722.997422][T27945] do_syscall_64+0x3d/0xb0 [ 1723.001886][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.008032][T27945] [ 1723.010364][T27945] Uninit was stored to memory at: [ 1723.015674][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.020403][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.025133][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.030224][T27945] do_syscall_64+0x3d/0xb0 [ 1723.034865][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.040865][T27945] [ 1723.043394][T27945] Local variable msg_sys created at: [ 1723.048686][T27945] do_recvmmsg+0xc9/0x1200 [ 1723.053448][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.311024][T27945] not chained 620000 origins [ 1723.315884][T27945] CPU: 0 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1723.326079][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.336143][T27945] Call Trace: [ 1723.339419][T27945] [ 1723.342348][T27945] dump_stack_lvl+0x200/0x28c [ 1723.347055][T27945] dump_stack+0x29/0x2c [ 1723.351226][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1723.356981][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.362120][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1723.367974][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.373115][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1723.378983][T27945] ? should_fail+0x79/0x9c0 [ 1723.383517][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.388663][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1723.394931][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1723.401043][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.406191][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1723.412030][T27945] __msan_chain_origin+0xbd/0x140 [ 1723.417206][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.421968][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.427141][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1723.433019][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.438183][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1723.444044][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.448597][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1723.453755][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1723.459006][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.464068][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1723.470353][T27945] do_syscall_64+0x3d/0xb0 [ 1723.474796][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.480720][T27945] RIP: 0033:0x7f2a7a289109 [ 1723.485158][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1723.504819][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1723.513247][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1723.521245][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1723.529227][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1723.537228][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1723.545206][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1723.553202][T27945] [ 1723.558968][T27945] Uninit was stored to memory at: [ 1723.564604][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.569338][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.574014][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.579087][T27945] do_syscall_64+0x3d/0xb0 [ 1723.583664][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.589607][T27945] [ 1723.592066][T27945] Uninit was stored to memory at: [ 1723.597167][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.601903][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.606644][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.611724][T27945] do_syscall_64+0x3d/0xb0 [ 1723.616371][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.622383][T27945] [ 1723.624701][T27945] Uninit was stored to memory at: [ 1723.629766][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.634647][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.639199][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.644459][T27945] do_syscall_64+0x3d/0xb0 [ 1723.648915][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.654973][T27945] [ 1723.657303][T27945] Uninit was stored to memory at: [ 1723.662553][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.667276][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.671826][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.677022][T27945] do_syscall_64+0x3d/0xb0 [ 1723.681483][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.687603][T27945] [ 1723.689938][T27945] Uninit was stored to memory at: [ 1723.695242][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.699972][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.704601][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.709653][T27945] do_syscall_64+0x3d/0xb0 [ 1723.714275][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.720210][T27945] [ 1723.722711][T27945] Uninit was stored to memory at: [ 1723.727800][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.732674][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.737262][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.742484][T27945] do_syscall_64+0x3d/0xb0 [ 1723.746941][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.753052][T27945] [ 1723.755414][T27945] Uninit was stored to memory at: [ 1723.760488][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1723.765329][T27945] do_recvmmsg+0x6b7/0x1200 [ 1723.769879][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.775073][T27945] do_syscall_64+0x3d/0xb0 [ 1723.779534][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.785643][T27945] [ 1723.787976][T27945] Local variable msg_sys created at: [ 1723.793368][T27945] do_recvmmsg+0xc9/0x1200 [ 1723.797841][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1723.988386][T27945] not chained 630000 origins [ 1723.996185][T27945] CPU: 1 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1724.006392][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.016482][T27945] Call Trace: [ 1724.019777][T27945] [ 1724.022711][T27945] dump_stack_lvl+0x200/0x28c [ 1724.027445][T27945] dump_stack+0x29/0x2c [ 1724.031633][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1724.037388][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.042536][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.048401][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.053547][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.059409][T27945] ? should_fail+0x79/0x9c0 [ 1724.063932][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.069088][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1724.075376][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1724.081506][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.086657][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.092503][T27945] __msan_chain_origin+0xbd/0x140 [ 1724.097582][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.102335][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.107497][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.113338][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.118500][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.124348][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.128999][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.134150][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1724.139406][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.144482][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1724.150798][T27945] do_syscall_64+0x3d/0xb0 [ 1724.155241][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.161183][T27945] RIP: 0033:0x7f2a7a289109 [ 1724.165610][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1724.185264][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1724.193729][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1724.201734][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1724.209724][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1724.217713][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1724.225700][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1724.233724][T27945] [ 1724.240198][T27945] Uninit was stored to memory at: [ 1724.245834][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.250564][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.255224][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.260313][T27945] do_syscall_64+0x3d/0xb0 [ 1724.264920][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.270864][T27945] [ 1724.273297][T27945] Uninit was stored to memory at: [ 1724.278390][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.283212][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.287769][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.292935][T27945] do_syscall_64+0x3d/0xb0 [ 1724.297389][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.303418][T27945] [ 1724.305749][T27945] Uninit was stored to memory at: [ 1724.310841][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.315658][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.320235][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.325401][T27945] do_syscall_64+0x3d/0xb0 [ 1724.329855][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.335880][T27945] [ 1724.338212][T27945] Uninit was stored to memory at: [ 1724.343439][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.348161][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.352854][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.357929][T27945] do_syscall_64+0x3d/0xb0 [ 1724.362472][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.368407][T27945] [ 1724.370761][T27945] Uninit was stored to memory at: [ 1724.375952][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.380675][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.385358][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.390437][T27945] do_syscall_64+0x3d/0xb0 [ 1724.394987][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.400923][T27945] [ 1724.403380][T27945] Uninit was stored to memory at: [ 1724.408471][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.413352][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.417902][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.423097][T27945] do_syscall_64+0x3d/0xb0 [ 1724.427557][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.433626][T27945] [ 1724.435962][T27945] Uninit was stored to memory at: [ 1724.441038][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.445926][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.450477][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.455644][T27945] do_syscall_64+0x3d/0xb0 [ 1724.460104][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.466180][T27945] [ 1724.468516][T27945] Local variable msg_sys created at: [ 1724.473950][T27945] do_recvmmsg+0xc9/0x1200 [ 1724.478417][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.688822][T27945] not chained 640000 origins [ 1724.693595][T27945] CPU: 1 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1724.703874][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.713942][T27945] Call Trace: [ 1724.717236][T27945] [ 1724.720176][T27945] dump_stack_lvl+0x200/0x28c [ 1724.724879][T27945] dump_stack+0x29/0x2c [ 1724.729070][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1724.734832][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.739993][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.745832][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.750968][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.756810][T27945] ? should_fail+0x79/0x9c0 [ 1724.761345][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.766481][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1724.772760][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1724.778891][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.784046][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.789881][T27945] __msan_chain_origin+0xbd/0x140 [ 1724.794934][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.800376][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.805536][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.811375][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.816536][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1724.822404][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.826971][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1724.832124][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1724.837372][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.842434][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1724.848734][T27945] do_syscall_64+0x3d/0xb0 [ 1724.853178][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.859110][T27945] RIP: 0033:0x7f2a7a289109 [ 1724.863536][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1724.883188][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1724.891636][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1724.899721][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1724.907705][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1724.915704][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1724.923705][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1724.931718][T27945] [ 1724.938719][T27945] Uninit was stored to memory at: [ 1724.949892][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.954755][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.959314][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.964551][T27945] do_syscall_64+0x3d/0xb0 [ 1724.969014][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.975115][T27945] [ 1724.977449][T27945] Uninit was stored to memory at: [ 1724.982708][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1724.987444][T27945] do_recvmmsg+0x6b7/0x1200 [ 1724.992141][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1724.997226][T27945] do_syscall_64+0x3d/0xb0 [ 1725.001687][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.007737][T27945] [ 1725.010082][T27945] Uninit was stored to memory at: [ 1725.015351][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.020077][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.024737][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.029816][T27945] do_syscall_64+0x3d/0xb0 [ 1725.034412][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.040363][T27945] [ 1725.042837][T27945] Uninit was stored to memory at: [ 1725.047934][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.052826][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.057415][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.062671][T27945] do_syscall_64+0x3d/0xb0 [ 1725.067134][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.073199][T27945] [ 1725.075530][T27945] Uninit was stored to memory at: [ 1725.080609][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.085497][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.090064][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.095278][T27945] do_syscall_64+0x3d/0xb0 [ 1725.099737][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.105826][T27945] [ 1725.108166][T27945] Uninit was stored to memory at: [ 1725.113378][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.118106][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.122820][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.127896][T27945] do_syscall_64+0x3d/0xb0 [ 1725.132459][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.138412][T27945] [ 1725.140757][T27945] Uninit was stored to memory at: [ 1725.145979][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.150729][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.155448][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.160532][T27945] do_syscall_64+0x3d/0xb0 [ 1725.165125][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.171073][T27945] [ 1725.173567][T27945] Local variable msg_sys created at: [ 1725.178866][T27945] do_recvmmsg+0xc9/0x1200 [ 1725.183478][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.407578][T27945] not chained 650000 origins [ 1725.412388][T27945] CPU: 0 PID: 27945 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1725.422582][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.432663][T27945] Call Trace: [ 1725.435948][T27945] [ 1725.438880][T27945] dump_stack_lvl+0x200/0x28c [ 1725.443584][T27945] dump_stack+0x29/0x2c [ 1725.447753][T27945] kmsan_internal_chain_origin+0x78/0x120 [ 1725.453506][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.458642][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1725.464495][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.469633][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1725.475477][T27945] ? should_fail+0x79/0x9c0 [ 1725.480018][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.485183][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1725.491480][T27945] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1725.497578][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.502714][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1725.508563][T27945] __msan_chain_origin+0xbd/0x140 [ 1725.513613][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.518333][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.523481][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1725.529341][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.534502][T27945] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1725.540395][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.544941][T27945] ? kmsan_get_metadata+0x33/0x220 [ 1725.550086][T27945] ? __x64_sys_recvmmsg+0x165/0x500 [ 1725.555313][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.560363][T27945] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1725.566656][T27945] do_syscall_64+0x3d/0xb0 [ 1725.571102][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.577020][T27945] RIP: 0033:0x7f2a7a289109 [ 1725.581461][T27945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1725.601100][T27945] RSP: 002b:00007f2a791fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1725.609532][T27945] RAX: ffffffffffffffda RBX: 00007f2a7a39c030 RCX: 00007f2a7a289109 [ 1725.617516][T27945] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1725.625501][T27945] RBP: 00007f2a7a2e305d R08: 0000000000000000 R09: 0000000000000000 [ 1725.633509][T27945] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1725.641508][T27945] R13: 00007f2a7a8cfb1f R14: 00007f2a791fe300 R15: 0000000000022000 [ 1725.649520][T27945] [ 1725.655002][T27945] Uninit was stored to memory at: [ 1725.660106][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.665300][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.669866][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.675137][T27945] do_syscall_64+0x3d/0xb0 [ 1725.679610][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.685661][T27945] [ 1725.688015][T27945] Uninit was stored to memory at: [ 1725.693263][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.697996][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.702735][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.707814][T27945] do_syscall_64+0x3d/0xb0 [ 1725.712459][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.718403][T27945] [ 1725.720724][T27945] Uninit was stored to memory at: [ 1725.725952][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.730678][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.735442][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.740538][T27945] do_syscall_64+0x3d/0xb0 [ 1725.745212][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.751275][T27945] [ 1725.753739][T27945] Uninit was stored to memory at: [ 1725.758913][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.763829][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.768409][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.773610][T27945] do_syscall_64+0x3d/0xb0 [ 1725.778075][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.784205][T27945] [ 1725.786543][T27945] Uninit was stored to memory at: [ 1725.791635][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.796530][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.801095][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.806307][T27945] do_syscall_64+0x3d/0xb0 [ 1725.810768][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.816889][T27945] [ 1725.819227][T27945] Uninit was stored to memory at: [ 1725.824441][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.829163][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.833893][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.838975][T27945] do_syscall_64+0x3d/0xb0 [ 1725.843633][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.849578][T27945] [ 1725.851902][T27945] Uninit was stored to memory at: [ 1725.857187][T27945] ___sys_recvmsg+0x73b/0xb40 [ 1725.861914][T27945] do_recvmmsg+0x6b7/0x1200 [ 1725.866683][T27945] __x64_sys_recvmmsg+0x2b3/0x500 [ 1725.871737][T27945] do_syscall_64+0x3d/0xb0 [ 1725.876318][T27945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.882363][T27945] [ 1725.884695][T27945] Local variable msg_sys created at: [ 1725.889968][T27945] do_recvmmsg+0xc9/0x1200 [ 1725.894605][T27945] __x64_sys_recvmmsg+0x2b3/0x500 03:45:17 executing program 5: io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) 03:45:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x21, 0x47, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000021c0), 0xe98, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/76}, 0x20) 03:45:17 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) 03:45:17 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) dup2(r0, r1) 03:45:17 executing program 2: brk(0xfffffffffffffff8) 03:45:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) 03:45:17 executing program 5: io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:17 executing program 2: brk(0xfffffffffffffff8) 03:45:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) 03:45:17 executing program 2: brk(0xfffffffffffffff8) 03:45:17 executing program 5: io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x21, 0x47, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000021c0), 0xe98, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/76}, 0x20) 03:45:17 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x20) 03:45:18 executing program 2: brk(0xfffffffffffffff8) [ 1727.955348][T27980] tipc: Started in network mode [ 1727.960444][T27980] tipc: Node identity 9, cluster identity 4711 [ 1727.966988][T27980] tipc: Node number set to 9 03:45:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002840)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/170, 0xaa}], 0x2, 0xe75, 0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001400)) 03:45:19 executing program 5: io_setup(0x3, &(0x7f0000000080)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:19 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x20) 03:45:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 03:45:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x21, 0x47, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000021c0), 0xe98, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/76}, 0x20) 03:45:19 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x62, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000001f00), 0x0, 0x0, 0x0, 0x0}) 03:45:19 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x20) 03:45:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 03:45:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) 03:45:19 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002840)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/170, 0xaa}], 0x2, 0xe75, 0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001400)) 03:45:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 03:45:20 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x20) [ 1729.074316][T10571] usb 5-1: new high-speed USB device number 4 using dummy_hcd 03:45:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) [ 1729.142535][ T3565] tipc: Left network mode 03:45:20 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:45:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) [ 1729.483088][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.494391][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.504427][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1729.515481][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 03:45:20 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 1729.527769][T10571] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 1729.539438][T10571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.812469][T10571] usb 5-1: config 0 descriptor?? [ 1730.272496][T10571] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1730.278716][T10571] input input133: Device does not respond to id packet M [ 1730.322872][T10571] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1730.329098][T10571] input input133: Device does not respond to id packet P [ 1730.373024][T10571] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1730.379355][T10571] input input133: Device does not respond to id packet B [ 1730.431343][T10571] input input133: Device does not respond to id packet N [ 1730.632369][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1730.652731][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1730.680690][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1730.705370][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1730.711598][T10571] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1730.717793][T10571] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1730.726435][T10571] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input133 [ 1730.800949][T10571] usb 5-1: USB disconnect, device number 4 03:45:22 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x62, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000001f00), 0x0, 0x0, 0x0, 0x0}) 03:45:22 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0xf9}, 0x20) 03:45:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002840)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/170, 0xaa}], 0x2, 0xe75, 0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001400)) 03:45:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) 03:45:22 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x8, 0x2, 0x3b8, 0xe8, 0x0, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@random="232328438237"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@empty, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@random="ef9b16a8357d"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'macvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fdb6291932b31e819ad32609aa4a524f3d27d2d8ad0036cfdc934599475a"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 03:45:22 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:45:22 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x8, 0x2, 0x3b8, 0xe8, 0x0, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@random="232328438237"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@empty, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@random="ef9b16a8357d"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'macvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fdb6291932b31e819ad32609aa4a524f3d27d2d8ad0036cfdc934599475a"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 03:45:22 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0xf9}, 0x20) 03:45:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) 03:45:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:45:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002840)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/170, 0xaa}], 0x2, 0xe75, 0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001400)) [ 1731.649486][T14841] usb 5-1: new high-speed USB device number 5 using dummy_hcd 03:45:22 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0xf9}, 0x20) [ 1732.033065][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.044480][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.054571][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1732.065956][T14841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1732.076207][T14841] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 1732.088490][T14841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.108875][T14841] usb 5-1: config 0 descriptor?? [ 1732.612467][T14841] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1732.618750][T14841] input input134: Device does not respond to id packet M [ 1732.669683][T14841] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1732.676005][T14841] input input134: Device does not respond to id packet P [ 1732.722469][T14841] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1732.728689][T14841] input input134: Device does not respond to id packet B [ 1732.790460][T14841] input input134: Device does not respond to id packet N [ 1733.012555][T14841] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1733.032558][T14841] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1733.052565][T14841] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1733.075319][T14841] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1733.081631][T14841] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1733.087928][T14841] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1733.096526][T14841] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input134 [ 1733.137350][T14841] usb 5-1: USB disconnect, device number 5 03:45:24 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x62, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000001f00), 0x0, 0x0, 0x0, 0x0}) 03:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 03:45:24 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x8, 0x2, 0x3b8, 0xe8, 0x0, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@random="232328438237"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@empty, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@random="ef9b16a8357d"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'macvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fdb6291932b31e819ad32609aa4a524f3d27d2d8ad0036cfdc934599475a"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 03:45:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:45:24 executing program 0: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0xf9}, 0x20) 03:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000024000b0e003404000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000001c0002"], 0x4c}}, 0x0) bind(r1, &(0x7f0000000080)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 1733.581255][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:45:24 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x8, 0x2, 0x3b8, 0xe8, 0x0, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {@mac=@random="232328438237"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@empty, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@random="ef9b16a8357d"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'macvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fdb6291932b31e819ad32609aa4a524f3d27d2d8ad0036cfdc934599475a"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 03:45:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:45:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 03:45:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 03:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000024000b0e003404000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000001c0002"], 0x4c}}, 0x0) bind(r1, &(0x7f0000000080)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 03:45:25 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="e6ff000000200000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1733.972391][T10571] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1734.047854][T28097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1734.362575][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.373856][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.383952][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1734.394964][T10571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1734.404938][T10571] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 1734.414326][T10571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.433984][T10571] usb 5-1: config 0 descriptor?? [ 1734.912589][T10571] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1734.918815][T10571] input input135: Device does not respond to id packet M [ 1734.973532][T10571] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1734.979861][T10571] input input135: Device does not respond to id packet P [ 1735.022454][T10571] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1735.028656][T10571] input input135: Device does not respond to id packet B [ 1735.072668][T10571] input input135: Device does not respond to id packet N [ 1735.293378][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1735.312600][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1735.332544][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1735.355971][T10571] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1735.366297][T10571] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1735.373133][T10571] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1735.381584][T10571] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input135 [ 1735.413231][T10571] usb 5-1: USB disconnect, device number 6 03:45:26 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ebd340f80602a346dc0000000109022400010000000009040000022000a70009058113000000000009050e4f"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x62, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000020c0)={0x2c, &(0x7f0000001f00), 0x0, 0x0, 0x0, 0x0}) 03:45:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 03:45:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:45:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 03:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000024000b0e003404000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000001c0002"], 0x4c}}, 0x0) bind(r1, &(0x7f0000000080)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 03:45:26 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="e6ff000000200000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1735.905141][T28107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:45:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 03:45:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 03:45:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 03:45:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="e6ff000000200000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000024000b0e003404000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000001c0002"], 0x4c}}, 0x0) bind(r1, &(0x7f0000000080)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 03:45:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) [ 1736.233143][T27917] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1736.417221][T28125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1736.604631][T27917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.616148][T27917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.626401][T27917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1736.637425][T27917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1736.647569][T27917] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46 [ 1736.656999][T27917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.673581][T27917] usb 5-1: config 0 descriptor?? [ 1737.152474][T27917] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1737.158620][T27917] input input136: Device does not respond to id packet M [ 1737.203837][T27917] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1737.210162][T27917] input input136: Device does not respond to id packet P [ 1737.252503][T27917] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1737.258802][T27917] input input136: Device does not respond to id packet B [ 1737.302682][T27917] input input136: Device does not respond to id packet N [ 1737.513722][T27917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1737.545958][T27917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1737.575494][T27917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1737.606834][T27917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1737.618780][T27917] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1737.626036][T27917] iforce 5-1:0.0: usb_submit_urb failed -90 [ 1737.634656][T27917] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input136 [ 1737.669407][T27917] usb 5-1: USB disconnect, device number 7 03:45:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xda, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "1c2f65df1bc501155748f24ed345df227e004bc6a32566374539c892000a1fb8239cc41703d2bb8c354c79c41772902d417c6ecaedf5a1cf567bae8e8552fea450f012b09b3ea31f8343af63381a12b0ca346a7069c1c878c58d75ce9edced9cb1edf5c3df0ba55644d9eefe430cabab6cf41d45a446d700c882ae75423df00932b12b11562ff275a5d7ed0eadd2a3d5e887f61fd151616b79660b2038f17cdb1b00add084bba8c9881e3365460b72cfc5232c126f903dfa8e0ae2cbfeb15bfcd900ba50fce6b9646335e763519a7a3c71330581caf0f6c07a6552517f4135024d3ac8e9023e8df494b77fd72fdd36aa884aebd8c8b0db2b591b8a62c975bc44"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x8, 0x6}]}}]}, 0x178}}, 0x0) 03:45:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 03:45:29 executing program 0: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x6000800) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') 03:45:29 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="e6ff000000200000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:29 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) [ 1738.120645][T28133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba8782c1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) 03:45:29 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) 03:45:29 executing program 0: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x6000800) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') [ 1738.342309][T28136] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1738.352065][T28136] netlink: 214 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001240), 0x10b402, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) 03:45:29 executing program 0: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x6000800) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') 03:45:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xda, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x8, 0x6}]}}]}, 0x178}}, 0x0) 03:45:29 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) 03:45:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001240), 0x10b402, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) [ 1738.854891][T28149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:30 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{0x65}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0) 03:45:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 03:45:30 executing program 0: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x6000800) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') 03:45:30 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) 03:45:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001240), 0x10b402, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) 03:45:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 1739.112995][T28149] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1739.123281][T28149] netlink: 214 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:30 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x16, 0x79, 0x54, 0x10, 0x112a, 0x1, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xfd, 0xd2, 0x25, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 03:45:30 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3, 0x2012, r0, 0x82000000) 03:45:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x9}, {0x64}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:45:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xda, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x8, 0x6}]}}]}, 0x178}}, 0x0) 03:45:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 03:45:30 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3, 0x2012, r0, 0x82000000) [ 1739.507632][T28174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 03:45:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001240), 0x10b402, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) 03:45:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x9}, {0x64}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:45:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 1739.608295][T28178] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1739.618268][T28178] netlink: 214 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1739.633191][T27917] usb 2-1: new high-speed USB device number 84 using dummy_hcd 03:45:30 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3, 0x2012, r0, 0x82000000) 03:45:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x51, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xda, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x8, 0x6}]}}]}, 0x178}}, 0x0) [ 1739.873476][T27917] usb 2-1: Using ep0 maxpacket: 16 03:45:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x9}, {0x64}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 1740.002492][T27917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1740.019042][T28190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1740.153013][T28190] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1740.162963][T28190] netlink: 214 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1740.182978][T27917] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=bc.da [ 1740.192396][T27917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.200564][T27917] usb 2-1: Product: syz [ 1740.205831][T27917] usb 2-1: Manufacturer: syz [ 1740.210583][T27917] usb 2-1: SerialNumber: syz [ 1740.239094][T27917] usb 2-1: config 0 descriptor?? [ 1740.298814][T27917] redrat3 2-1:0.0: Couldn't find all endpoints [ 1740.497595][T27917] usb 2-1: USB disconnect, device number 84 03:45:32 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x16, 0x79, 0x54, 0x10, 0x112a, 0x1, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xfd, 0xd2, 0x25, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 03:45:32 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x3, 0x2012, r0, 0x82000000) 03:45:32 executing program 2: r0 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) 03:45:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbf) 03:45:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x15, 0x0, 0x0, 0x9}, {0x64}, {0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:45:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) 03:45:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) 03:45:32 executing program 2: r0 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) 03:45:32 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7f, 0xff, 0x4, 0x400}]}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg2\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000900)={'wg2\x00'}) syz_io_uring_setup(0x7543, &(0x7f0000000100)={0x0, 0x8ec5, 0x6, 0x3, 0x88, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x40, 0x5, 0x8}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, r1) 03:45:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d080b889acf20d169ed4063253a0d8e09f0b59b4507e590f92d7310c09ff70cbcd8756e406eb2fe48efea9d48fd8bc0c", 0x30) 03:45:32 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbf) 03:45:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) [ 1741.472575][T10571] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1741.500790][ T24] audit: type=1326 audit(1655437532.553:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28208 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 [ 1741.732493][T10571] usb 2-1: Using ep0 maxpacket: 16 [ 1741.862980][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1742.052800][T10571] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=bc.da [ 1742.062304][T10571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.070480][T10571] usb 2-1: Product: syz [ 1742.075201][T10571] usb 2-1: Manufacturer: syz [ 1742.079954][T10571] usb 2-1: SerialNumber: syz [ 1742.089695][T10571] usb 2-1: config 0 descriptor?? [ 1742.138613][T10571] redrat3 2-1:0.0: Couldn't find all endpoints [ 1742.342148][T27917] usb 2-1: USB disconnect, device number 85 03:45:33 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x16, 0x79, 0x54, 0x10, 0x112a, 0x1, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xfd, 0xd2, 0x25, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 03:45:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d080b889acf20d169ed4063253a0d8e09f0b59b4507e590f92d7310c09ff70cbcd8756e406eb2fe48efea9d48fd8bc0c", 0x30) 03:45:33 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbf) 03:45:33 executing program 2: r0 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) 03:45:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) 03:45:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7f, 0xff, 0x4, 0x400}]}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg2\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000900)={'wg2\x00'}) syz_io_uring_setup(0x7543, &(0x7f0000000100)={0x0, 0x8ec5, 0x6, 0x3, 0x88, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x40, 0x5, 0x8}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, r1) 03:45:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d080b889acf20d169ed4063253a0d8e09f0b59b4507e590f92d7310c09ff70cbcd8756e406eb2fe48efea9d48fd8bc0c", 0x30) 03:45:34 executing program 2: r0 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) 03:45:34 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbf) 03:45:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1743.056330][ T24] audit: type=1326 audit(1655437534.113:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28223 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d080b889acf20d169ed4063253a0d8e09f0b59b4507e590f92d7310c09ff70cbcd8756e406eb2fe48efea9d48fd8bc0c", 0x30) 03:45:34 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x50}]}}}], 0x18}}], 0x2, 0x0) [ 1743.312971][T10571] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1743.562660][T10571] usb 2-1: Using ep0 maxpacket: 16 [ 1743.692676][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1743.882738][T10571] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=bc.da [ 1743.892132][T10571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.900458][T10571] usb 2-1: Product: syz [ 1743.904932][T10571] usb 2-1: Manufacturer: syz [ 1743.909672][T10571] usb 2-1: SerialNumber: syz [ 1743.928679][T10571] usb 2-1: config 0 descriptor?? [ 1743.978762][T10571] redrat3 2-1:0.0: Couldn't find all endpoints [ 1744.185284][T10571] usb 2-1: USB disconnect, device number 86 03:45:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:45:35 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7f, 0xff, 0x4, 0x400}]}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg2\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000900)={'wg2\x00'}) syz_io_uring_setup(0x7543, &(0x7f0000000100)={0x0, 0x8ec5, 0x6, 0x3, 0x88, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x40, 0x5, 0x8}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, r1) 03:45:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) 03:45:35 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:45:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x50}]}}}], 0x18}}], 0x2, 0x0) 03:45:35 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x16, 0x79, 0x54, 0x10, 0x112a, 0x1, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xfd, 0xd2, 0x25, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 03:45:35 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x50}]}}}], 0x18}}], 0x2, 0x0) [ 1744.870226][ T24] audit: type=1326 audit(1655437535.923:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28249 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:45:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) 03:45:36 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:45:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x50}]}}}], 0x18}}], 0x2, 0x0) [ 1745.112518][T27917] usb 2-1: new high-speed USB device number 87 using dummy_hcd 03:45:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) 03:45:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1745.362855][T27917] usb 2-1: Using ep0 maxpacket: 16 [ 1745.487123][T27917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1745.667702][T27917] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=bc.da [ 1745.677348][T27917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.686086][T27917] usb 2-1: Product: syz [ 1745.690412][T27917] usb 2-1: Manufacturer: syz [ 1745.695531][T27917] usb 2-1: SerialNumber: syz [ 1745.732859][T27917] usb 2-1: config 0 descriptor?? [ 1745.778118][T27917] redrat3 2-1:0.0: Couldn't find all endpoints [ 1745.986149][T27917] usb 2-1: USB disconnect, device number 87 03:45:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563b, &(0x7f00000000c0)) 03:45:37 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:45:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x4}, 0x1c, 0x0}}], 0x1, 0x0) 03:45:37 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x121) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7f, 0xff, 0x4, 0x400}]}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg2\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000900)={'wg2\x00'}) syz_io_uring_setup(0x7543, &(0x7f0000000100)={0x0, 0x8ec5, 0x6, 0x3, 0x88, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x40, 0x5, 0x8}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ptrace(0x10, r1) 03:45:37 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 03:45:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 03:45:37 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x100069c7}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 03:45:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563b, &(0x7f00000000c0)) [ 1746.768113][ T24] audit: type=1326 audit(1655437537.823:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28281 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) 03:45:38 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x100069c7}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 03:45:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 03:45:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563b, &(0x7f00000000c0)) 03:45:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) 03:45:38 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x100069c7}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 03:45:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 03:45:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) 03:45:38 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 03:45:38 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x100069c7}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 03:45:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563b, &(0x7f00000000c0)) 03:45:38 executing program 0: unshare(0xa020400) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 03:45:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 03:45:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 03:45:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 03:45:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x38, 0x119, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}}, 0x0) 03:45:38 executing program 0: unshare(0xa020400) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 03:45:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getscheduler(0x0) 03:45:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 03:45:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 03:45:39 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 03:45:39 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x400c55cb, &(0x7f0000000000)='syz0\x00') 03:45:39 executing program 0: unshare(0xa020400) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 03:45:39 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getscheduler(0x0) 03:45:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 03:45:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 03:45:39 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x400c55cb, &(0x7f0000000000)='syz0\x00') 03:45:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 03:45:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 03:45:39 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getscheduler(0x0) 03:45:39 executing program 0: unshare(0xa020400) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 03:45:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x4) 03:45:40 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a32000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 03:45:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getscheduler(0x0) 03:45:40 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x400c55cb, &(0x7f0000000000)='syz0\x00') 03:45:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') lseek(r0, 0x4, 0x0) 03:45:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x4) 03:45:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffff7f}]}}]}, 0x38}}, 0x0) 03:45:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x4) 03:45:40 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x400c55cb, &(0x7f0000000000)='syz0\x00') 03:45:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') lseek(r0, 0x4, 0x0) 03:45:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x2, 0x1, '\t'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x2}, 0x8) 03:45:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffff7f}]}}]}, 0x38}}, 0x0) 03:45:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x2, 0x1, '\t'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x2}, 0x8) 03:45:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') lseek(r0, 0x4, 0x0) 03:45:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x4) 03:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800210000000000f5ff00000a800000000000000000000014000100fec0"], 0x30}}, 0x0) 03:45:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffff7f}]}}]}, 0x38}}, 0x0) 03:45:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x2, 0x1, '\t'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x2}, 0x8) 03:45:41 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1150}}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVdn:De', 0x0) 03:45:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') lseek(r0, 0x4, 0x0) 03:45:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0, 0x0, 0x0, 0x0}}, 0x10) 03:45:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffff7f}]}}]}, 0x38}}, 0x0) 03:45:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x2, 0x1, '\t'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x2}, 0x8) 03:45:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800210000000000f5ff00000a800000000000000000000014000100fec0"], 0x30}}, 0x0) 03:45:41 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1150}}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVdn:De', 0x0) 03:45:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800210000000000f5ff00000a800000000000000000000014000100fec0"], 0x30}}, 0x0) 03:45:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0, 0x0, 0x0, 0x0}}, 0x10) 03:45:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x2001) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 03:45:41 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:41 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28}, {0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0) 03:45:41 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="88000000000000001701000000000000531997605bf7aac70db957ede3e66181f2d31974fd103bfbb3668bee2a737d41c7ec58914fd1376eb61b97a3d9e57a42987d38455162458468143742a9914be7e40ad615fa0bfa24b4bc9d81fdfe710c3001339088b081b78a07d4261565b6bb83c2bc5605f990675538a1dbb23523aa21f2160bc824000010100000000000001701000001040000083a318c38ee4bbcbc6ef0c6e3e55fe994361b14c8d8fc9870f63ec89bd46ea5a964dfef680968602b10c4662788002d83a2dcb7ea63d0fed2f08f1b35c47874ab27b8f8c4fb8b60ed71461a1ead68ca0d87ab248da24fb1187de84f111c175ffa7727b3c85351b16512e48d6ecef14a2ed9b75673e0bb9796752ec73168aaa20b68dee658bb13bb7ab6064d16b75daf065add00477892d8390d84cca0c0f6504cd41a44cff40271d1a0d35d2a282fc01ad377e5d2f5d273b08c6942d401ff1f4d290e55a7e3ddc246cc7d32de9048bd2b121af596db72bc8e80a8c526da21c6780428d0e72edb0ce8075375f6079d6c96cb407223170337c813c06826f28262c22de6fd7cf00e75f167d60d02912e43b27234d031acfd3c17a8afa2ddf3151e5867c3d78b216e847a89be414c55fc68bbe068a7c7adb47b00d7e7b5b772b714e9175ce23fed7b903bce84632e4baba4c86def8a2aea3afdcf60aefe7b7cefa3a4cc2d21cd1c8a8a9cf116f0901bba978fc8a9c016a761bf8fb6eabf5e30ab0e5f8b6550e3b6d70874d6e3ed8f9165f79d61435e13929a81cb6355ab894b1b5558870e68754d81884d9255f8b26fd859dc2ad611e9340b10014c8369da5f7e2b03715a2c6a3ebdf15b9a3bdbc61d940ebbd8d8a74d4baf113a78e492a832a9e01e860ac5bca494caaa7267094618ae3a3b751564cc9a9467fb137ad0b7bdf3f5fee59c78e0da339adaa1f83baabe70baa8148f2b82e50545b79af821f5e79b0459ac7e2ff4e6699bbe14a620af0df549afe018448f162842ab8fee75fccf17b8bec1d9f90e1ce55556b30d0a60d865ce20b23c1d33898a6278a79554798be8b4defaf9277875a6f76bbf2792e3da6583d9c0e0f5fac9b4fa80dbbab2c4ffc064fb6eb712ca7f078dcf541d12485e5d2fb03c424fb4b3b5aaf803f118b10806101e555907599ef288f3127d7358f21529dc04ab9b0bc5fe9a0635e26714caced2d104de9e643ae67122e5daf137ccaaac04bbc8ce0d26d5536689616d4371c09f779abe3162610729c841c6fb4a05e2af3bfb87513e4f7cced82e3e08ca3d68fa0f55bae558ce0c6507ce70a4f8e77d0ec975ca6e6db34de42744e4cd3da9debee4b76a360f5fa84b1135cdd7b23ea4c61773a2140a67a3f71b66daccfbd0d46d4ed7b1ff726a231149ff05e57c993cad83ff34fd111254ae69171b34fde23b7428fb06b0b90e41fe7bc94eb597e6a8cf9b2713ca2bd376b1bda01b620486f9f9beeb9c986c16684e2f843e1c0607c0677c4464167ec07ffa0865b60ad485007347460d1e823d2f44f1787d671f635dacce7e0ddf84f1949cc1e9a210f8ef4895baf50a2679b8954f9a8c1c257282cf615d9a7bc5f545c6f976280da53821e3da0a386a0cab84e52f4a2a4976f1ffa8685d01baf9d2c3fde2d38c1dec4f46665a3b374963fc9ebfd8c9602d27f077a2974525e566a31964de0db28a384b047712817f24a235ad2aa4a87e621faaebd1b89a96bd5fb782bf71e3c4f6c8750a5c1fc34d21395fb89e324d69826f20e4a90b0fe3633b7d9a07d11e24c4cfbca3708e3a93207714d744ac2f4f6152c6f36e9de43d8a32329e1386b516c270ab7f81ad2948a542be123c1170d2463b11127c42a89f04e127823faafabe72b318d61e79253e1e5e259ba5d451bc72c16aadeace93fa822a510bc792bc980dd1e0ab4c118bc8773558f9988c07801135f3d355cc6f7ad6ff20436c90cf7646ceea7243335dcc528e8f754d54c8ca451fed967f128b467ab9c05e3a8f274e1b6127f905b987b35bc25271b686d6e50a9145415b90373fe2e46fc19d5adfff43943cbb4674694a0484cbdd00d501f38c7b7017af24163c48f2af5c837e0b31dfd0631bab71303555efc2198ae839248af1127bec0c5abed47377af356d0a7ca88a3a5e4ca41a659d48934ca66dd9ed9469c8a3207e58af5e8ee4c82528d473332f9070d12c829ca7c14292475f98ebe39a23e92448c49deaba4c26b5342dd6ac1337e1e6ea908050035491a650f4f9c35830b112cbfd24721b6f37ef543e68d8a6bf4de913c99aaa3b389309435c0b4da5b7897be7399f92a308ceab562c22e216bceccc14b70c12431689919c140d924cd6aad9bf78c2e3d14e0e7056b97fd41aa5ed09c6599865fcf6f0a32b08a5b53bc584a6d4389493dfb3e70d777078f602818dd7158542665c9c041038e6fb25b6170b1ca40fe40ff9c992d677fd0e98c49d53f1b95c8048f377948bcda854a8d1cf0b830973ea2e27b2c0fb5d755711da3779d62843a322d1123787ffce38a39902dcf592c9ffcc4162f82bb41f6325df6e3fb5a2fe7c52933c0f6dcda63693de1a62296cc33ffb5f4401032b238eb359a47f08e795e5d64a73eb58039eaf46cdf7e0edf6cef3bbce9e5b63c474b9c880fba1404c5e1d9b87f3b3e41ea3a0bb9e992debcd5054cddcda4c1abf591e7cf9253936a42fdfe151b545e01c28735ef428382e75b3bced39c656348b5a87c1ab22f424fffe9720086cf4e3c1122b403fc78fbc9dc1dbc2b708be835fc4167796e61296329dafc9ebd94c7314f881aeead6d65a47905c41879f0995dfae2cca0f285a3f7a7162729f6e17e69f41432e855b1c667cffd63a0951b124b31cc3b6cfcad5c50abccead80986847d24380e8571c93090e6826879193af9166fe11cddf5449515fdccd84971e62cd2ca7acdf96f61d64ccdf466e01f0bf8d78ff8607f6f9c6d359a1182fbe78ceea3d50ae80c6d5918c62a56a584df9a8596280463a802c4485075c6c3b4f1a45c83db1082391231c2098fcbcab804f18dcb891d7cf4b0f6b5a6d69f8150f6e22abb2aa3db89fe24981fa411a992e786b7a0df2d58695d50f22bef503bf41cb6ca629841edff25c34bf212370b38f405b48212aead2ff8db0a386376b17fb4a1202df6b12bb2f1f62f9d0d12f53d2ba85a2a037db976ad6a2ea1253a2a0581030a5a9ed4179a0b9011ab73c5533c1aede6ea01e165dd37365e3bf1565d331faf4dd2d58"], 0x1150}}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVdn:De', 0x0) 03:45:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0, 0x0, 0x0, 0x0}}, 0x10) 03:45:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800210000000000f5ff00000a800000000000000000000014000100fec0"], 0x30}}, 0x0) [ 1750.612482][T28425] usb usb9: usbfs: process 28425 (syz-executor.4) did not claim interface 0 before use 03:45:41 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28}, {0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0) 03:45:41 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1150}}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVdn:De', 0x0) 03:45:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x2001) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 03:45:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0, 0x0, 0x0, 0x0}}, 0x10) 03:45:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x7, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 03:45:42 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28}, {0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0) 03:45:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x40000000909, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) dup2(r1, r0) [ 1751.081482][T28443] usb usb9: usbfs: process 28443 (syz-executor.4) did not claim interface 0 before use [ 1751.121782][ T24] audit: type=1326 audit(1655437542.173:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28445 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x0 03:45:42 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x5, 0x80, 0x643, 0x100, 0x8, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 03:45:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x7, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 03:45:42 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28}, {0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x301}, 0x14}}, 0x0) 03:45:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x2001) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) [ 1751.541668][T28456] usb usb9: usbfs: process 28456 (syz-executor.4) did not claim interface 0 before use 03:45:42 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x7, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 03:45:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x2001) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 03:45:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x7, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) [ 1751.881059][T28466] usb usb9: usbfs: process 28466 (syz-executor.4) did not claim interface 0 before use 03:45:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x5, 0x80, 0x643, 0x100, 0x8, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 03:45:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x40000000909, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) dup2(r1, r0) 03:45:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) [ 1752.168638][ T24] audit: type=1326 audit(1655437543.223:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28471 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x0 03:45:43 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:43 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8920, &(0x7f0000000400)={'vcan0\x00'}) 03:45:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 03:45:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x5, 0x80, 0x643, 0x100, 0x8, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 03:45:43 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8920, &(0x7f0000000400)={'vcan0\x00'}) 03:45:43 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 03:45:43 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8920, &(0x7f0000000400)={'vcan0\x00'}) 03:45:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 03:45:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x40000000909, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) dup2(r1, r0) 03:45:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8920, &(0x7f0000000400)={'vcan0\x00'}) 03:45:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x5, 0x80, 0x643, 0x100, 0x8, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) [ 1753.234763][ T24] audit: type=1326 audit(1655437544.293:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x0 03:45:44 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:45:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000a40), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x2e}) [ 1753.729302][T28510] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:45:44 executing program 5: io_setup(0x3, &(0x7f00000000c0)=0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001c80)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:45:45 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000480)=ANY=[], 0x1f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r1, &(0x7f0000000040)=0x3, 0x200) 03:45:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000a40), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x2e}) 03:45:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x40000000909, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) dup2(r1, r0) 03:45:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 03:45:45 executing program 5: io_setup(0x3, &(0x7f00000000c0)=0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001c80)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 1754.109340][T28521] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:45:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000a40), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x2e}) [ 1754.294894][ T24] audit: type=1326 audit(1655437545.343:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28526 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7a289109 code=0x0 03:45:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) [ 1754.497450][T28536] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:45:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000010c0), 0x17fffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xf08, 0x1, 0x0, "7578a01de40517478b0017ad4fe9eb71bfac952e5fa6f17c633ac3198947cb09"}) 03:45:46 executing program 5: io_setup(0x3, &(0x7f00000000c0)=0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001c80)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000a40), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x2e}) 03:45:46 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) [ 1755.124621][T28543] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:45:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000010c0), 0x17fffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xf08, 0x1, 0x0, "7578a01de40517478b0017ad4fe9eb71bfac952e5fa6f17c633ac3198947cb09"}) [ 1755.249067][T28548] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1755.377466][T28548] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1755.416593][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1755.426253][T28550] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1755.578240][T28550] bond9: (slave veth49): Enslaving as an active interface with a down link 03:45:46 executing program 5: io_setup(0x3, &(0x7f00000000c0)=0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001c80)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:45:46 executing program 2: r0 = syz_io_uring_setup(0x7690, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @empty}}}, 0x0) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0x0, @loopback}}, 0x1e) io_uring_enter(r0, 0x6ef, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000010c0), 0x17fffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xf08, 0x1, 0x0, "7578a01de40517478b0017ad4fe9eb71bfac952e5fa6f17c633ac3198947cb09"}) 03:45:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd2321afb56fa54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf31b715f3b92b755fb84c0e63439657f954978525888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166dff9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057e177615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d8871370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6eadb43e6b6ea816070b377902d463fac11025fdbac6366b355c76c507563e8b4867ee08771445c10b2da47b1272f324e04b194d96c7d8b67be4a93845f86979c9c6edd233c0ed1d698da04b69a05081c8796fc432ee8fa08cdd87215085fd4f6c2c77828d867b8ea7bc574324585a5459d849bb2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x309, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x40}}, 0x0) [ 1755.637310][T28553] bond9: (slave ip6gretap1): making interface the new active one [ 1755.652921][T28553] device ip6gretap1 entered promiscuous mode [ 1755.659706][T28553] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link 03:45:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) [ 1755.680896][T27917] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready 03:45:46 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000010c0), 0x17fffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xf08, 0x1, 0x0, "7578a01de40517478b0017ad4fe9eb71bfac952e5fa6f17c633ac3198947cb09"}) 03:45:46 executing program 2: r0 = syz_io_uring_setup(0x7690, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @empty}}}, 0x0) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0x0, @loopback}}, 0x1e) io_uring_enter(r0, 0x6ef, 0x0, 0x0, 0x0, 0x0) 03:45:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x309, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x40}}, 0x0) 03:45:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 03:45:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1, 0xffffffff}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 03:45:47 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:47 executing program 2: r0 = syz_io_uring_setup(0x7690, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @empty}}}, 0x0) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0x0, @loopback}}, 0x1e) io_uring_enter(r0, 0x6ef, 0x0, 0x0, 0x0, 0x0) [ 1756.117783][T28572] input: syz0 as /devices/virtual/input/input141 03:45:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) 03:45:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x309, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x40}}, 0x0) 03:45:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1, 0xffffffff}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 03:45:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 1756.327234][T28582] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1756.422319][T28582] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1756.443935][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1756.455922][T28588] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1756.516073][T28588] bond10: (slave veth51): Enslaving as an active interface with a down link [ 1756.539391][T28595] input: syz0 as /devices/virtual/input/input142 03:45:47 executing program 2: r0 = syz_io_uring_setup(0x7690, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @empty}}}, 0x0) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0x0, @loopback}}, 0x1e) io_uring_enter(r0, 0x6ef, 0x0, 0x0, 0x0, 0x0) [ 1756.567645][T28592] bond10: (slave ip6gretap2): making interface the new active one [ 1756.584162][T28592] device ip6gretap2 entered promiscuous mode [ 1756.591014][T28592] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1756.603703][T14024] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready 03:45:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1, 0xffffffff}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 03:45:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 03:45:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) 03:45:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 1756.860735][T28603] input: syz0 as /devices/virtual/input/input143 03:45:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x309, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x40}}, 0x0) [ 1757.117855][T28610] input: syz0 as /devices/virtual/input/input144 03:45:48 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x1, 0x1, 0xffffffff}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 03:45:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 03:45:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 1757.280148][T28614] input: syz0 as /devices/virtual/input/input145 03:45:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) 03:45:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) 03:45:48 executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) [ 1757.510617][T28627] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:45:48 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 1757.645637][T28627] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1757.669484][T28634] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1757.785812][T28638] input: syz0 as /devices/virtual/input/input147 [ 1757.943709][T28628] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:45:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x71, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x128, 0x80, "bfd1a1b0b7789a9feb7bead60a4e44249665066438af308c79abda7fd4556e643da255ed6b"}}]}, 0x164}}, 0x0) [ 1758.012910][T28628] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1758.057439][T28632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1758.067436][T28632] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) read(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8d33f3d306a8", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="affff00000000000000000000000000000b3e0e100f214981667ac86a385884dad6933aeb216c08770e0248d11b45f50", 0x30}], 0x1) 03:45:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) [ 1758.150657][T28632] bond11: (slave veth53): Enslaving as an active interface with a down link [ 1758.178466][T28641] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1758.245365][T28641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1758.262981][T28620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1758.272511][T28620] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1758.333672][T28620] bond12: (slave veth79): Enslaving as an active interface with a down link [ 1758.346967][T28642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1758.356704][T28642] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1758.497039][T28642] bond1: (slave veth105): Enslaving as an active interface with a down link 03:45:49 executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f00000000c0)=""/223, 0xdf}], 0x2, 0x0, 0x0) listen(r2, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000002280)=""/187, 0xbb}], 0x1, 0x12c, 0x0) 03:45:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) read(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8d33f3d306a8", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="affff00000000000000000000000000000b3e0e100f214981667ac86a385884dad6933aeb216c08770e0248d11b45f50", 0x30}], 0x1) [ 1758.628851][T28627] bond12: (slave ip6gretap1): making interface the new active one [ 1758.644243][T28627] device ip6gretap1 entered promiscuous mode [ 1758.650989][T28627] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1758.676568][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 1758.732466][T28644] bond1: (slave ip6gretap1): making interface the new active one [ 1758.740052][T28644] device ip6gretap1 entered promiscuous mode [ 1758.747236][T28644] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1758.779199][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1758.828503][T28663] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1758.890948][T28663] 8021q: adding VLAN 0 to HW filter on device bond12 03:45:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) read(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8d33f3d306a8", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="affff00000000000000000000000000000b3e0e100f214981667ac86a385884dad6933aeb216c08770e0248d11b45f50", 0x30}], 0x1) 03:45:50 executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:50 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:50 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) tkill(r1, 0x1000000000016) 03:45:50 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x1000000) 03:45:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) read(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8d33f3d306a8", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="affff00000000000000000000000000000b3e0e100f214981667ac86a385884dad6933aeb216c08770e0248d11b45f50", 0x30}], 0x1) 03:45:50 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) tkill(r1, 0x1000000000016) [ 1759.476354][T28659] bond12: (slave veth55): Enslaving as an active interface with a down link [ 1759.485814][T28685] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1759.555347][T28685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1759.567452][T28689] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1759.648130][T28689] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1759.724612][T28690] bond2: (slave veth107): Enslaving as an active interface with a down link [ 1759.824591][T28691] bond13: (slave veth81): Enslaving as an active interface with a down link [ 1759.861674][T28692] bond2: (slave ip6gretap2): making interface the new active one 03:45:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2b, 0x801, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 1759.877611][T28692] device ip6gretap2 entered promiscuous mode [ 1759.884511][T28692] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link 03:45:50 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) tkill(r1, 0x1000000000016) [ 1759.943637][T28663] bond12: (slave ip6gretap3): making interface the new active one [ 1759.959399][T28663] device ip6gretap3 entered promiscuous mode [ 1759.966285][T28663] bond12: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1760.026527][T28693] bond13: (slave ip6gretap2): making interface the new active one [ 1760.042293][T28693] device ip6gretap2 entered promiscuous mode [ 1760.049292][T28693] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1760.073475][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 1760.111659][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1760.124379][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready 03:45:51 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x1000000) 03:45:51 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, r0+10000000}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) tkill(r1, 0x1000000000016) 03:45:51 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:51 executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xb) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32=r2], 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 03:45:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x5}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf4}}, 0x0) [ 1760.427986][T28710] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x5}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf4}}, 0x0) [ 1760.553793][T28722] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1760.632735][T28722] 8021q: adding VLAN 0 to HW filter on device bond3 03:45:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x4, &(0x7f0000000940)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x83}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1760.676670][T28724] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1760.732423][T28728] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1760.795513][T28724] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1760.858540][T28722] bond3: (slave ip6gretap3): making interface the new active one [ 1760.875702][T28722] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1760.885893][T28725] __nla_validate_parse: 6 callbacks suppressed [ 1760.885953][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1760.909405][T28725] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.3'. 03:45:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x4, &(0x7f0000000940)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x83}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x5}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf4}}, 0x0) 03:45:52 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2b, 0x801, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 1761.015646][T28725] bond14: (slave veth83): Enslaving as an active interface with a down link [ 1761.102935][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1761.112529][T28716] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1761.189046][T28734] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1761.215828][T28716] bond3: (slave veth109): Enslaving as an active interface with a down link [ 1761.259462][T28724] bond14: (slave ip6gretap3): making interface the new active one [ 1761.279078][T28724] device ip6gretap3 entered promiscuous mode [ 1761.285951][T28724] bond14: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1761.295918][T14024] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready 03:45:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x4, &(0x7f0000000940)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x83}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:52 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x1000000) [ 1761.308686][T14024] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready 03:45:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x5}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf4}}, 0x0) 03:45:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x4, &(0x7f0000000940)=@framed={{}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x83}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:45:52 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) [ 1761.614323][T28743] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:52 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:45:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:45:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2b, 0x801, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 03:45:53 executing program 2: r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x182, &(0x7f0000000540), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:45:53 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:45:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:45:53 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x1000000) 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:45:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:45:53 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:45:53 executing program 3: r0 = syz_io_uring_setup(0x7784, &(0x7f0000000400), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = eventfd(0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x3) io_uring_enter(r0, 0x342, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="56080d573dc7caf3", 0x41}], 0x1) 03:45:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:45:53 executing program 2: r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x182, &(0x7f0000000540), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 03:45:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2b, 0x801, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 03:45:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)) 03:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 03:45:54 executing program 3: r0 = syz_io_uring_setup(0x7784, &(0x7f0000000400), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = eventfd(0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x3) io_uring_enter(r0, 0x342, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="56080d573dc7caf3", 0x41}], 0x1) 03:45:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) 03:45:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)) 03:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 03:45:54 executing program 3: r0 = syz_io_uring_setup(0x7784, &(0x7f0000000400), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = eventfd(0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x3) io_uring_enter(r0, 0x342, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="56080d573dc7caf3", 0x41}], 0x1) 03:45:54 executing program 2: r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x182, &(0x7f0000000540), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:45:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)) 03:45:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) [ 1764.262376][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1764.262594][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 03:45:55 executing program 3: r0 = syz_io_uring_setup(0x7784, &(0x7f0000000400), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = eventfd(0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE, 0x3) io_uring_enter(r0, 0x342, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)="56080d573dc7caf3", 0x41}], 0x1) 03:45:55 executing program 1: r0 = io_uring_setup(0x799d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x2e) 03:45:55 executing program 2: r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x182, &(0x7f0000000540), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 03:45:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)) 03:45:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) 03:45:55 executing program 5: r0 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 03:45:55 executing program 1: r0 = io_uring_setup(0x799d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x2e) 03:45:55 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x21, 0x0]}]}}}}}}, 0x0) 03:45:56 executing program 5: r0 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 03:45:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001780)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:45:56 executing program 1: r0 = io_uring_setup(0x799d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x2e) 03:45:56 executing program 5: r0 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 03:45:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001780)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 1765.314369][ T24] audit: type=1326 audit(1655437556.373:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:56 executing program 1: r0 = io_uring_setup(0x799d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x2e) 03:45:56 executing program 2: r0 = epoll_create1(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002500)={0x19000000d}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 03:45:56 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x21, 0x0]}]}}}}}}, 0x0) [ 1765.715485][ T24] audit: type=1326 audit(1655437556.773:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28849 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) 03:45:57 executing program 5: r0 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000a2da8114a0c26fbc00000003000a0000000000000000000000000000000000000000ffffffff000000000000000000000000065f18a00f8b822400000000000000007fffffff000000000000020000000000ffffffff0100000003000000000000000000726f736530020000000000000000000069705f767469300000000000000000fc687064647001003800000000000000007465716c30000000000000000000eddcaaaaaaaaaa00fffffff35d6e000005ffffef00020000ddff0000f0000000f0000000280100003830325f33000000000dbf057b31e34dc6000000000000000000000000bf0600080000e0ffffffffff41ca14610003006e666163637400000000fbfaffffffffffffff0008000000000000bbf9000000280000000000000073797a31080000000aa91eb21ad800000000050000000000000000000000000000000000000300006d61fe6b000000000000000000007fca64b73efa54c2da8100ff010000000000e8ffffff00a1fa19a6ffffffff0000000000000000000000000000000000ea200000002000000000000000040000000000000000000000c27b6a760001000000ffffffff00000000"]}, 0x230) 03:45:57 executing program 2: r0 = epoll_create1(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002500)={0x19000000d}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 03:45:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001780)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:45:57 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x21, 0x0]}]}}}}}}, 0x0) 03:45:57 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000005a00)=[{&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="01", 0x1}], 0x1, &(0x7f00000001c0)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x20}}], 0x48}], 0x1, 0x0) [ 1766.086470][ T24] audit: type=1326 audit(1655437557.143:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28858 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001780)={0x1, &(0x7f0000000000)=[{0x6}]}) 03:45:57 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000005a00)=[{&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="01", 0x1}], 0x1, &(0x7f00000001c0)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x20}}], 0x48}], 0x1, 0x0) 03:45:57 executing program 2: r0 = epoll_create1(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002500)={0x19000000d}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 03:45:57 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x21, 0x0]}]}}}}}}, 0x0) 03:45:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 03:45:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 1766.437032][ T24] audit: type=1326 audit(1655437557.493:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28871 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9089109 code=0x0 03:45:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x18, {"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", 0x1000}}, 0x1006) 03:45:58 executing program 2: r0 = epoll_create1(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002500)={0x19000000d}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 03:45:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x0, r1}) 03:45:58 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000005a00)=[{&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="01", 0x1}], 0x1, &(0x7f00000001c0)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x20}}], 0x48}], 0x1, 0x0) 03:45:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 03:45:58 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000140), 0x10) close(r0) 03:45:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x0, r1}) 03:45:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 03:45:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) 03:45:58 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000005a00)=[{&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="01", 0x1}], 0x1, &(0x7f00000001c0)=[@sndrcv={0x30}, @prinfo={0x18, 0x84, 0x5, {0x20}}], 0x48}], 0x1, 0x0) 03:45:58 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000140), 0x10) close(r0) 03:45:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x0, r1}) [ 1767.772486][ T3549] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1767.842444][ T1060] device ip6gretap1 left promiscuous mode [ 1768.165693][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.165874][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.166009][ T3549] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1768.166200][ T3549] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1768.166343][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.170445][ T3549] usb 3-1: config 0 descriptor?? 03:45:59 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:45:59 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000140), 0x10) close(r0) 03:45:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 03:45:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x0, r1}) 03:45:59 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000140), 0x10) close(r0) 03:45:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 03:45:59 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000300)={'vxcan1\x00'}) 03:45:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80, 0x3}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) readv(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1768.663810][ T3549] keytouch 0003:0926:3333.005F: fixing up Keytouch IEC report descriptor [ 1768.701125][ T3549] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.005F/input/input148 [ 1768.812121][ T3549] keytouch 0003:0926:3333.005F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1768.870573][ T3549] usb 3-1: USB disconnect, device number 119 [ 1768.893728][ T39] device ip6gretap2 left promiscuous mode 03:46:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) 03:46:00 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000300)={'vxcan1\x00'}) 03:46:00 executing program 1: r0 = syz_io_uring_setup(0x304b, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)) 03:46:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 03:46:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000fe6122314a000800", @ANYRES32=r3, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 03:46:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80, 0x3}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) readv(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1769.452360][T28929] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:46:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80, 0x3}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) readv(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1769.539226][T28929] device bond15 entered promiscuous mode [ 1769.546004][T28929] 8021q: adding VLAN 0 to HW filter on device bond15 03:46:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 03:46:00 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000300)={'vxcan1\x00'}) 03:46:00 executing program 1: r0 = syz_io_uring_setup(0x304b, &(0x7f0000000580), &(0x7f0000ffd000/0x1000)=nil, &(0x7f000014d000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)) 03:46:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80, 0x3}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) readv(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1769.733549][T28939] bond15: (slave veth85): making interface the new active one [ 1769.741175][T28939] device veth85 entered promiscuous mode [ 1769.750349][T28939] bond15: (slave veth85): Enslaving as an active interface with an up link [ 1769.763511][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready 03:46:00 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000300)={'vxcan1\x00'}) [ 1769.832380][ T3549] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1769.855859][T28946] ===================================================== [ 1769.863119][T28946] BUG: KMSAN: uninit-value in tctx_task_work+0x1304/0x1ce0 [ 1769.873809][T28946] tctx_task_work+0x1304/0x1ce0 [ 1769.878733][T28946] task_work_run+0x157/0x290 [ 1769.884332][T28946] get_signal+0x164/0x2d40 [ 1769.888897][T28946] arch_do_signal_or_restart+0x72/0xdd0 [ 1769.894639][T28946] exit_to_user_mode_loop+0x146/0x3b0 [ 1769.900111][T28946] exit_to_user_mode_prepare+0x195/0x240 [ 1769.905921][T28946] syscall_exit_to_user_mode+0x23/0x40 [ 1769.911446][T28946] do_syscall_64+0x49/0xb0 [ 1769.916000][T28946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1769.922042][T28946] [ 1769.924399][T28946] Uninit was created at: [ 1769.928702][T28946] kmem_cache_alloc_bulk+0xf3d/0x1550 [ 1769.934203][T28946] __io_alloc_req_refill+0x486/0x882 [ 1769.939544][T28946] io_submit_sqes+0x8de/0x1020 [ 1769.944439][T28946] __se_sys_io_uring_enter+0x887/0x2530 [ 1769.950029][T28946] __x64_sys_io_uring_enter+0x1a1/0x200 [ 1769.956004][T28946] do_syscall_64+0x3d/0xb0 [ 1769.960483][T28946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1769.966519][T28946] [ 1769.968874][T28946] CPU: 1 PID: 28946 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1769.979154][T28946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1769.989344][T28946] ===================================================== [ 1769.996376][T28946] Disabling lock debugging due to kernel taint [ 1770.002631][T28946] Kernel panic - not syncing: kmsan.panic set ... [ 1770.009057][T28946] CPU: 1 PID: 28946 Comm: syz-executor.1 Tainted: G B 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1770.020730][T28946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.030816][T28946] Call Trace: [ 1770.034113][T28946] [ 1770.037061][T28946] dump_stack_lvl+0x200/0x28c [ 1770.041792][T28946] dump_stack+0x29/0x2c [ 1770.045978][T28946] panic+0x502/0xc7a [ 1770.049928][T28946] ? add_taint+0x185/0x210 [ 1770.054404][T28946] ? console_unlock+0x1bb0/0x20e0 [ 1770.059532][T28946] kmsan_report+0x2cc/0x2d0 [ 1770.064093][T28946] ? __msan_warning+0x92/0x110 [ 1770.068906][T28946] ? tctx_task_work+0x1304/0x1ce0 [ 1770.073984][T28946] ? task_work_run+0x157/0x290 [ 1770.078793][T28946] ? get_signal+0x164/0x2d40 [ 1770.083432][T28946] ? arch_do_signal_or_restart+0x72/0xdd0 [ 1770.089230][T28946] ? exit_to_user_mode_loop+0x146/0x3b0 [ 1770.094839][T28946] ? exit_to_user_mode_prepare+0x195/0x240 [ 1770.100713][T28946] ? syscall_exit_to_user_mode+0x23/0x40 [ 1770.106403][T28946] ? do_syscall_64+0x49/0xb0 [ 1770.111043][T28946] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.117156][T28946] ? kmsan_get_metadata+0x33/0x220 [ 1770.122325][T28946] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1770.128193][T28946] ? tctx_task_work+0x62/0x1ce0 [ 1770.133091][T28946] ? filter_irq_stacks+0xb9/0x230 [ 1770.138185][T28946] ? kmsan_get_metadata+0x33/0x220 [ 1770.143343][T28946] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1770.149198][T28946] ? kmsan_get_metadata+0x33/0x220 [ 1770.154355][T28946] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1770.160213][T28946] __msan_warning+0x92/0x110 [ 1770.164852][T28946] tctx_task_work+0x1304/0x1ce0 [ 1770.169774][T28946] ? __io_uring_add_tctx_node+0xac0/0xac0 [ 1770.175539][T28946] task_work_run+0x157/0x290 [ 1770.180202][T28946] get_signal+0x164/0x2d40 [ 1770.184665][T28946] ? filter_irq_stacks+0xb9/0x230 [ 1770.189834][T28946] ? kmsan_get_metadata+0x33/0x220 [ 1770.194992][T28946] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1770.201305][T28946] ? arch_do_signal_or_restart+0x5a/0xdd0 [ 1770.207258][T28946] ? exit_to_user_mode_loop+0x146/0x3b0 [ 1770.212854][T28946] arch_do_signal_or_restart+0x72/0xdd0 [ 1770.218456][T28946] ? __run_hrtimer+0xc80/0xc80 [ 1770.223443][T28946] ? common_nsleep+0x16f/0x1a0 [ 1770.228253][T28946] exit_to_user_mode_loop+0x146/0x3b0 [ 1770.233687][T28946] exit_to_user_mode_prepare+0x195/0x240 [ 1770.239378][T28946] syscall_exit_to_user_mode+0x23/0x40 [ 1770.244893][T28946] do_syscall_64+0x49/0xb0 [ 1770.249347][T28946] ? asm_exc_page_fault+0x8/0x30 [ 1770.254322][T28946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1770.260254][T28946] RIP: 0033:0x7f778fa89109 [ 1770.264692][T28946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1770.284333][T28946] RSP: 002b:00007f7790c33168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1770.292778][T28946] RAX: fffffffffffffdfc RBX: 00007f778fb9bf60 RCX: 00007f778fa89109 [ 1770.300776][T28946] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1770.308786][T28946] RBP: 00007f778fae305d R08: 0000000000000000 R09: 0000000000000000 [ 1770.316777][T28946] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 1770.324768][T28946] R13: 00007f77900cfb1f R14: 00007f7790c33300 R15: 0000000000022000 [ 1770.332776][T28946] [ 1770.335969][T28946] Kernel Offset: disabled [ 1770.340297][T28946] Rebooting in 86400 seconds..